Engineer | DevSecOps

CEiiA; Matosinhos; Hybrid; EUR 42,000 - 64,000; Full time

Benefits offered by this job

Health Insurance for employees

Gym partnerships

Nutritionist partnership

Up to three additional vacation days

Day off on your birthday

Job summary

CEiiA is seeking a DevSecOps Engineer to join the Digital Solutions team in Porto. The role focuses on integrating security into development and operations, enforcing secure pipelines, and aligning dev, security, and cloud practices.

You will work on securing CI/CD pipelines, implementing secure IaC, and applying cloud security controls across AWS, Azure, and GCP, while collaborating with cross-functional teams.

Qualifications

• University degree in Computer Engineering or Software Engineering or equivalent.
• At least 2 years of experience in DevOps, Security Engineering, or Site Reliability Engineering.
• Understanding of DevOps practices and CI/CD tools.

Responsibilities

• Secure CI/CD pipelines: integrate security tools like static analysis, vulnerability scanning, and secrets detection.
• Implement secure Infrastructure as Code with Terraform/CloudFormation/Ansible.
• Apply cloud security controls across AWS, Azure, and GCP.
• Participate in incident response and post-mortem analysis to restore solutions quickly.
• Deploy and manage security tooling for runtime protection and monitoring.
• Collaborate with development, operations, and security teams to foster a DevSecOps culture.
• Governing AI coding agents and securing AI-assisted workflows.

Skills

DevSecOps

CI/CD

Scripting

Docker

Kubernetes

Cloud platforms

Security engineering

Collaboration

Education

University degree in Computer/Software Engineering

Tools

GitLab CI/CD

Jenkins

GitHub Actions

Terraform

Ansible

CloudFormation

Snyk

Aqua

Prisma Cloud

Falco

HashiCorp Vault

Docker

Kubernetes

Job description

We are an Engineering and Product Development Center that designs, develops and produces new technologies, products and services for a more sustainable society.

We work to bridge the gap between cities, industry and universities around major development and industrialization programs for products and services, from Portugal, in high-tech sectors such as mobility, aeronautics and space.

This opportunity for anEngineer | DevSecOps (m/f/d) will be integrated into the Digital Solutions team.

We are seeking a curious DevSecOps Engineer to join our growing team.

As a DevSecOps Engineer, you will be responsible for integrating security practices into our development and operational workflows.

Your role is critical to enforce the alignment between development, security, and operations, ensuring our applications and infrastructure are scalable, resilient and above all, secured from day one. Key responsabilities are:

• Secure CI/CD Pipelines: Integrate security tools and practices into CI/CD pipelines (e.g., static code analysis, vulnerability scanning, secrets detection);
• Automation & Infrastructure as Code (IaC): Implement and maintain secure IaC using tools like Terraform, CloudFormation, Ansible or similars;
• Cloud Security: Implement cloud-native (AWS, Azure, GCP) security solutions and controls;
• Incident Response: Participate in the incident response and post-mortem analysis, ensuring the rapid restoration of the solutions;
• Tooling & Monitoring: Deploy and manage security tools (e.g., using tools like Snyk, Aqua, Prisma Cloud, Falco, HashiCorp Vault or similars) for runtime protection and monitoring;
• Collaboration: Partner with development, operations, and security teams to foster a DevSecOps culture and champion security best practices across the organization.
• AI: Securing LLM-based applications or using AI-assisted tools responsibly to enhance DevSecOps workflows, plus, governing AI coding agents in defining project rules, context files, tool permissions, and guardrails.
• University degree or technical-professional training in Computer Engineering,Software Engineering and similar areas;
• At least2 years of experience in DevOps, Security Engineering, or Site Reliability Engineering;
• Understanding of DevOps practices and CI/CD tools (e.g., using tools like GitLab CI/CD, Jenkins, GitHub Actions or similars);
• Proficiency in at least one scripting language (e.g., using tools like Python, Bash, Go or similars);
• Experience with containers and orchestration (e.g., using tools like Docker, Kubernetes or similars);
• Knowledge of secure coding principles, vulnerability management, and application security;
• Hands-on experience with cloud platforms (AWS, Azure, or GCP);
• Strong collaboration skills to work effectively with all teams;
• Clear and concise communication with both technical and non-technical stakeholders;
• Proactive and self-driven mindset with the ability to identify and resolve issues before they escalade;
• Pasion for problem-solving and a structured approach to quickly restore solutions;
• Adaptability and resilience in a fast-paced, constantly evolving technical environment;
• Commitment to continuous learning and staying up-to-date emerging technologies;
• Empathy and business awareness, balancing security needs with organizational goals.
• Dynamic, multidisciplinary team and a positive, relaxed work environment;
• We facilitate and promote a balanced and healthy lifestyle, integrating work with personal life;
• We offer Health Insurance for employees;
• Partnerships with gyms, a nutritionist, and other benefits;
• Up to three additional vacation days;
• Day off on your birthday.