Lead Platform Security Engineer, DevSecOps

OutSystems; Lisboa; Vor Ort; EUR 95.000 - 130.000; Vollzeit

Benefits dieser Stelle

Remote-friendly talent policy

Zusammenfassung

OutSystems is seeking a Principal Platform Engineer, DevSecOps to own the security strategy for the outer loop of our delivery platform. You will design and implement deploy-time policy, attestation verification, remediation workflows, and automation to ensure safe, auditable releases.

You will lead cross-team initiatives, enforce SBOM/signing controls, and coordinate with engineering, product, security and operations to elevate security across the release pipeline.

Qualifikationen

• Bachelor's degree or equivalent experience in CS/IT or related field.
• Experience owning security/compliance posture of a production platform end-to-end, at scale and under audit.
• Hands-on with Kubernetes and at least one major cloud (Azure and/or AWS).
• Experience with CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
• Familiarity with attestations, SBOM, signing, and supply chain security in production.

Aufgaben

• Own the technical strategy for outer-loop security and supply chain integrity across R&D delivery.
• Stay hands-on: design and build deploy-time policy, attestation verification, remediation workflows, security automation.
• Enforce supply chain integrity at release boundary and ensure only trusted artifacts reach production.
• Build security controls into the deployment path across environments to stop unsafe changes.
• Lead incident response and drive faster recovery and long-term fixes.
• Automate compliance evidence and turn control requirements into machine-verified checks.

Kenntnisse

Kubernetes

Azure

AWS

CI/CD

Terraform

Python

.NET

Security engineering

SBOM

Ausbildung

Bachelor's degree in Computer Science / IT

Tools

Sigstore

SLSA

Kyverno

OPA

CWPP

Jobbeschreibung

OutSystems is seeking a Principal Platform Engineer, DevSecOps to own the security strategy for the outer loop of our delivery platform. You will design and implement deploy-time policy, attestation verification, remediation workflows, and automation to ensure safe, auditable releases.

You will lead cross-team initiatives, enforce SBOM/signing controls, and coordinate with engineering, product, security and operations to elevate security across the release pipeline.