DevSecOps (Lisbon / Porto - Hybrid)

Claranet limited; Lisboa, Porto; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Integration into a dynamic and motivated team

Additional training

Salary package according to the role performed

Job summary

Claranet limited is seeking a DevSecOps professional to join their team in Lisbon, Portugal. In this role, you will integrate security controls into CI/CD pipelines, automate vulnerability analyses, and collaborate on secure coding practices. Candidates should have strong experience in application security and knowledge of key tools like Terraform and Kubernetes.

We offer opportunities for additional training and a competitive salary package to align with your expertise.

Qualifications

• Experience in DevOps, DevSecOps, or application security.
• Knowledge of CI/CD pipelines (e.g., Jenkins, GitLab CI/CD, GitHub Actions).
• Experience with Infrastructure as Code (e.g., Terraform, ARM, CloudFormation).
• Knowledge of containers and orchestration (Docker, Kubernetes).
• Experience with Kubernetes security.
• Knowledge of OWASP Top 10 and secure coding practices.
• Experience with secrets management (e.g., Vault, Azure Key Vault, AWS Secrets Manager).
• Experience with security monitoring and observability.

Responsibilities

• Integrate security controls into CI/CD pipelines.
• Automate vulnerability analysis processes and security testing.
• Implement SAST, DAST, SCA, and container scanning tools.
• Collaborate with development teams for secure coding.
• Define and implement security policies in Infrastructure as Code.
• Monitor vulnerabilities in dependencies and libraries.
• Support design of secure architectures for cloud applications.
• Implement secrets and credentials management mechanisms.
• Contribute to compliance and security checks in delivery processes.
• Collaborate with security teams on identified vulnerabilities.

Skills

Experience in DevOps, DevSecOps, or application security

Knowledge of CI/CD pipelines (e.g., Jenkins, GitLab CI/CD)

Experience with Infrastructure as Code (e.g., Terraform)

Knowledge of containers and orchestration (Docker, Kubernetes)

Experience with Kubernetes security

Knowledge of OWASP Top 10 and secure coding practices

Experience with secrets management (e.g., Vault)

Experience with security monitoring and observability

Tools

Jenkins

GitLab CI/CD

GitHub Actions

Azure DevOps

Terraform

Kubernetes

Job description

We're fastlearners, hard workers, natural collaborators... and weMake Modern Happen!

Ourambition is to unlock the potential of our digital world so that organisationseverywhere can innovate and thrive securely. We aim to achieve this goal bybringing together the world’s most talented people and the most powerfultechnologies, combining them to address our customers' challenges and to buildsomething stronger together.

Right now,we are looking for aDevSecOpsfor a client on our Talent Team.

Yourresponsibilities include:

• Integrate security controls intoCI/CD pipelines.
  
• Automate vulnerability analysisprocesses and security testing throughout the development lifecycle.
  
• Implement SAST, DAST, SCA, andcontainer scanning tools.
  
• Collaborate with development teamsto ensure the adoption of secure coding best practices.
  
• Define and implement securitypolicies in Infrastructure as Code (IaC).
  
• Monitor vulnerabilities independencies, libraries, and container images.
  
• Support the design of securearchitectures for cloud applications and microservices.
  
• Implement secrets and credentialsmanagement mechanisms.
  
• Contribute to the automation ofcompliance and security checks in delivery processes.
  
• Collaborate with security teams inthe response and mitigation of identified vulnerabilities.
  

You musthave:

• Experience in DevOps, DevSecOps, or applicationsecurity.
  
• Knowledge of CI/CD pipelines (e.g., Jenkins, GitLabCI/CD, GitHub Actions, Azure DevOps).
  
• Experience with Infrastructure as Code (e.g.,Terraform, ARM, CloudFormation).
  
• Knowledge of containers and orchestration (Docker,Kubernetes).
  
• Experience with Kubernetes security;
  
• Knowledge of OWASP Top 10 and secure coding practices
  
• Experience with secrets management (e.g., Vault, AzureKey Vault, AWS Secrets Manager)
  
• Experience with security monitoring and observability.
  

We Value:

• DAST
  
• SCA
  
• Container security scanning
  
• Knowledge of cloud platforms (Azure,AWS, or GCP)
  
• Experience in vulnerabilitymanagement and application security
  

We offer:

• Integration into a dynamic andmotivated team for the performance of the role.
  
• Additional training.
  
• Salary package according to therole performed.