Remote Senior DevSecOps Engineer

Luza Group; Lisboa; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work flexibility

Equipment provided

Benefits plan

Resumo da oferta

Syffer is seeking a skilled DevSecOps Engineer to define and implement secure architectures and CI/CD security controls across complex delivery pipelines. You will integrate security tools (GitHub Advanced Security, SonarQube, JFrog) and ensure governance, traceability, and secure release management.

You'll collaborate with development teams, promote secure practices, and operate in a hybrid work model. Fluency in Portuguese and English is required, and experience in regulated enterprise

Qualificações

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Experience with CI/CD pipelines and secure delivery practices.
• Knowledge of Git workflows, release management, and deployment governance.

Responsabilidades

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Advanced Security, SonarQube, JFrog) within development workflows.
• Establish secure artifact management and controlled promotion across environments.
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards.
• Maintain code quality and security policies using SonarQube.
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray.
• Define branching strategies and enforce secure release and deployment controls.
• Ensure traceability, auditability, and proper governance across the delivery lifecycle.
• Support and enable development teams through guidance, training, and practical secure implementations.
• Hybrid work model.

Conhecimentos

DevSecOps

Application security

DevOps engineering

Vulnerability management

Regulated environments

Ferramentas

GitHub Advanced Security

SonarQube

JFrog Artifactory

Xray

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

Descrição da oferta de emprego

Syffer is seeking a skilled DevSecOps Engineer to define and implement secure architectures and CI/CD security controls across complex delivery pipelines. You will integrate security tools (GitHub Advanced Security, SonarQube, JFrog) and ensure governance, traceability, and secure release management.

You'll collaborate with development teams, promote secure practices, and operate in a hybrid work model. Fluency in Portuguese and English is required, and experience in regulated enterprise