DevSecOps Engineer (Remote) – Secure CI/CD Architect

LUZA Group; Oliveira de Azeméis; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Remote work flexibility

Equipment provided

Benefits plan

Job summary

LUZA Group is seeking a DevSecOps professional to design and implement secure architectures and CI/CD controls for our client projects. You will integrate security tools like GitHub Advanced Security, SonarQube, and JFrog within development workflows, and manage vulnerabilities end-to-end across environments.

You will define secure release, deployment, and governance practices, ensuring traceability and compliance while partnering with development teams to deliver secure software at scale.

Qualifications

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Strong hands-on experience with CI/CD pipelines and secure delivery practices.
• Experience with GitHub Enterprise & GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray.
• Strong understanding of vulnerability management and secure artifact lifecycle.
• Experience working directly with development teams in remediation efforts.
• Knowledge of Git workflows, release management, and deployment governance.
• Experience in regulated or large enterprise environments.

Responsibilities

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Advanced Security, SonarQube, JFrog) within development workflows.
• Establish secure artifact management and controlled promotion across environments
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards
• Maintain code quality and security policies using SonarQube;
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray
• Define branching strategies and enforce secure release and deployment controls;
• Ensure traceability, auditability, and proper governance across the delivery lifecycle;
• Support and enable development teams through guidance, training, and practical secure implementations;

Skills

DevSecOps experience

CI/CD pipelines

GitHub Advanced Security

SonarQube configuration

JFrog Artifactory

Xray knowledge

vulnerability management

secure release governance

Tools

GitHub Enterprise

GitHub Advanced Security

SonarQube

JFrog Artifactory

Xray

Job description

LUZA Group is seeking a DevSecOps professional to design and implement secure architectures and CI/CD controls for our client projects. You will integrate security tools like GitHub Advanced Security, SonarQube, and JFrog within development workflows, and manage vulnerabilities end-to-end across environments.

You will define secure release, deployment, and governance practices, ensuring traceability and compliance while partnering with development teams to deliver secure software at scale.