Remote Senior DevSecOps Engineer — Secure CI/CD Expert

LUZA Group; Oeiras; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work whenever possible

Work equipment provided

Benefits plan

Resumo da oferta

Syffer is a consulting company focused on talent, tech and innovation, seeking a DevSecOps-focused engineer to define secure architectures and integrate security into CI/CD pipelines. You will work with tools like GitHub Advanced Security, SonarQube, and JFrog across environments, managing vulnerabilities end-to-end and enforcing governance.

The role emphasizes collaboration with development teams, training, and secure release controls in a hybrid work setting, with focus on Portugal and

Qualificações

• Proven experience in DevSecOps, application security, or DevOps engineering.

Responsabilidades

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Enterprise & GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray) within development workflows.
• Establish secure artifact management and controlled promotion across environments.
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards.
• Maintain code quality and security policies using SonarQube.
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray.
• Define branching strategies and enforce secure release and deployment controls.
• Ensure traceability, auditability, and proper governance across the delivery lifecycle.
• Support and enable development teams through guidance, training, and practical secure implementations.
• Hybrid work model.

Conhecimentos

DevSecOps

Application security

CI/CD pipelines

GitHub Advanced Security

SonarQube

JFrog Artifactory

Xray

Vulnerability management

Release governance

Training & guidance

Ferramentas

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

Container registry

Descrição da oferta de emprego

Syffer is a consulting company focused on talent, tech and innovation, seeking a DevSecOps-focused engineer to define secure architectures and integrate security into CI/CD pipelines. You will work with tools like GitHub Advanced Security, SonarQube, and JFrog across environments, managing vulnerabilities end-to-end and enforcing governance.

The role emphasizes collaboration with development teams, training, and secure release controls in a hybrid work setting, with focus on Portugal and