DevSecOps Engineer

MoOngy Group; Portugal; Híbrido; EUR 50 000 - 70 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Training & certifications

Career growth opportunities

Resumo da oferta

MoOngy Group in Portugal is seeking a DevSecOps Engineer to design and maintain industrial CI/CD pipelines with integrated security controls. You will manage security and obsolescence risks and work with SBOMs and security scanning tools.

The role requires hands-on experience with GitLab CI, Azure DevOps, Jenkins, and JFrog Xray, and the ability to operate without direct access to application source code. The position is hybrid, 2–3 days in the office, with strong growth prospects.

Qualificações

• Experience designing and maintaining industrial CI/CD pipelines.
• Ability to work with SBOMs and security scanning tools.
• Familiarity with library EOL risks and dependencies.
• Ability to operate without direct access to the application source code.

Responsabilidades

• Design and maintain industrial CI/CD pipelines, integrating security controls.
• Manage security and obsolescence risks, including library EOL and dependencies.
• Work with SBOMs and security scanning tools, including JFrog Xray, without direct access to source code.

Conhecimentos

CI/CD knowledge

Security & obsolescence management

SBOM understanding

Dependency management

Ferramentas

GitLab CI

Azure DevOps

Jenkins

JFrog Xray

Descrição da oferta de emprego

Founded in 2005, MoOngy is an international group specialized in Engineering and IT, operating across Europe and North Africa.

With a presence in 14 countries, more than 40 entities, and 9,500 talents, we continue to grow everyday thanks to one simple thing: people who are genuinely passionate about technology and innovation.

DevSecOps Engineer

Work Model: hybrid - 2/3 days a week in the office

Eligibility: Currently living in Portugal and be legally authorized to work there

• Security & Obsolescence, library obsolescence / EOL risks;
• CI/CD, GitLab CI, Azure DevOps, Jenkins or equivalent, CI/CD pipeline security controls, industrial CI/CD pipelines;
• SBOM, CycloneDX, SPDX, ability to work from SBOMs;
• JFrog Xray or similar security scanning tools, dependency management and repositories.

Nice to have:

• Interest in automation, agent-based approaches or GitHub Copilot;
• Contribution to standards or development methodologies.

Responsibilities:

• Design and maintain industrial CI/CD pipelines, integrating security controls;
• Manage security and obsolescence risks, including library EOL risks and dependencies;
• Work with SBOMs and security scanning tools, including JFrog Xray or similar, without direct access to application source code.

Why Join Us?

• Innovation & Impact:Play a central role in driving the future through creative solutions
• Continuous learning: Trainings, certifications, and structured career growth.
• Team spirit: An international community where collaboration means something.
• Diversity & inclusion: At MoOngy, everyone belongs — no fine print.

Diversity & Inclusion

At MoOngy Group, we are committed to equality and diversity. We foster a safe, inclusive, and respectful environment where everyone has equal opportunities. We do not discriminate based on age, origin, gender, sexual orientation, disability, or any criterion unrelated to skills and merit.