Hybrid DevSecOps Engineer – Secure Pipelines & SBOMs Expert

moOngy; Portugal; Híbrido; EUR 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Resumo da oferta

MoOngy is seeking a DevSecOps Engineer to strengthen secure CI/CD pipelines in a hybrid Portugal-based role. The position emphasizes security, automation, and scalable software delivery across diverse contexts.

You will manage security and obsolescence risks, work with SBOMs and security scanning tools, and collaborate with an international team to advance automation and best practices in a technology-driven environment.

Qualificações

• Experience designing and maintaining industrial CI/CD pipelines with security controls.
• Experience managing security and obsolescence risks, including library EOL.
• Experience with SBOMs and security scanning tools such as JFrog Xray.
• Familiarity with GitLab CI, Azure DevOps, or Jenkins and secure pipelines.

Responsabilidades

• Design and maintain industrial CI/CD pipelines, integrating security controls.
• Manage security and obsolescence risks, including library EOL risks and dependencies.
• Work with SBOMs and security scanning tools, including JFrog Xray or similar, without direct access to application source code.

Conhecimentos

Security-minded

CI/CD

Cloud & DevOps

Ferramentas

GitLab CI

Azure DevOps

Jenkins

JFrog Xray

CycloneDX

SPDX

Descrição da oferta de emprego

MoOngy is seeking a DevSecOps Engineer to strengthen secure CI/CD pipelines in a hybrid Portugal-based role. The position emphasizes security, automation, and scalable software delivery across diverse contexts.

You will manage security and obsolescence risks, work with SBOMs and security scanning tools, and collaborate with an international team to advance automation and best practices in a technology-driven environment.