Senior DevSecOps Engineer

emagine; Lisboa; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

emagine is seeking a Senior DevSecOps Engineer in Portugal to embed security controls across the software delivery lifecycle. You will work hands-on on secure CI/CD, vulnerability management, and architecture patterns to safeguard application delivery pipelines.

You will collaborate with development teams to raise secure engineering practices, manage artifacts and dependencies, and enforce governance across environments.

Qualifications

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Hands-on experience with CI/CD pipelines and secure delivery practices.
• Experience with: GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray.
• Strong understanding of vulnerability management and secure artifact lifecycle.
• Experience working directly with development teams in remediation efforts.
• Knowledge of Git workflows, release management, and deployment governance.
• Experience in regulated or large enterprise environments.

Responsibilities

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Advanced Security, SonarQube, JFrog) within development workflows.
• Establish secure artifact management and controlled promotion across environments.
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards.
• Maintain code quality and security policies using SonarQube.
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray.
• Define branching strategies and enforce secure release and deployment controls.
• Ensure traceability, auditability, and proper governance across the delivery lifecycle.
• Support and enable development teams through guidance, training, and practical secure implementations.

Skills

DevSecOps

CI/CD pipelines

Vulnerability management

Security architecture

Remediation support

Release governance

Tools

GitHub Advanced Security

SonarQube

JFrog Artifactory

JFrog Xray

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

SBOM

Kubernetes/OpenShift

Job description

The Senior DevSecOps Engineer will be responsible for embedding security controls, architecture patterns, and operational security practices into the software delivery lifecycle. The role combines hands-on DevSecOps engineering, security architecture advisory, vulnerability management, secure CI/CD enablement, and close collaboration with development teams. This position is especially focused on securing application delivery pipelines, improving vulnerability detection and remediation, supporting development teams in secure engineering practices, and ensuring that source code, dependencies, container images, secrets, and deployment artifacts are continuously assessed before promotion to production.

The candidate must have extensive hands-on experience with multiple cloud security tools and technologies, acquired through several years of designing, implementing, and operating secure cloud environments.

Requirements (must Have)

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Strong hands-on experience with CI/CD pipelines and secure delivery practices.
• Experience with: GitHub Enterprise & GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray.
• Strong understanding of vulnerability management and secure artifact lifecycle.
• Experience working directly with development teams in remediation efforts.
• Knowledge of Git workflows, release management, and deployment governance.
• Experience in regulated or large enterprise environments.

Technical Skills

• Security & DevSecOps Tools: GitHub Advanced Security, SonarQube, JFrog Artifactory & Xray.
• CI/CD & Engineering: GitHub Actions, Azure DevOps, Jenkins, GitLab CI, pipeline-as-code, automated security gates.
• Application Security: SAST, SCA, secrets management, OWASP Top 10, vulnerability triage and remediation.
• Cloud & Containers: Docker/OCI, Kubernetes/OpenShift, container registry and image governance.
• Engineering Practices: GitFlow, branching strategies, pull request governance, artifact immutability and traceability.

Key Responsibilities

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Advanced Security, SonarQube, JFrog) within development workflows.
• Establish secure artifact management and controlled promotion across environments.
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards.
• Maintain code quality and security policies using SonarQube.
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray.
• Define branching strategies and enforce secure release and deployment controls.
• Ensure traceability, auditability, and proper governance across the delivery lifecycle.
• Support and enable development teams through guidance, training, and practical secure implementations.

Other Details

Hybrid work model: Weeks 1 and 2: 2 days on-site in Oeiras (Taguspark); Week 3: Fully remote. The pattern then repeats, with the possibility to gradually reduce on-site work to 1 day per week. Candidates must be based in Portugal.