Senior DevSecOps Engineer - Hybrid (Portugal)

emagine; Lisboa; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

emagine is seeking a Senior DevSecOps Engineer in Portugal to embed security controls across the software delivery lifecycle. You will work hands-on on secure CI/CD, vulnerability management, and architecture patterns to safeguard application delivery pipelines.

You will collaborate with development teams to raise secure engineering practices, manage artifacts and dependencies, and enforce governance across environments.

Qualifications

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Hands-on experience with CI/CD pipelines and secure delivery practices.
• Experience with: GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray.
• Strong understanding of vulnerability management and secure artifact lifecycle.
• Experience working directly with development teams in remediation efforts.
• Knowledge of Git workflows, release management, and deployment governance.
• Experience in regulated or large enterprise environments.

Responsibilities

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates).
• Integrate and manage security tools (GitHub Advanced Security, SonarQube, JFrog) within development workflows.
• Establish secure artifact management and controlled promotion across environments.
• Manage vulnerabilities end-to-end: analysis, prioritization, remediation support, and reporting.
• Configure GitHub security features and enforce repository and PR governance standards.
• Maintain code quality and security policies using SonarQube.
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray.
• Define branching strategies and enforce secure release and deployment controls.
• Ensure traceability, auditability, and proper governance across the delivery lifecycle.
• Support and enable development teams through guidance, training, and practical secure implementations.

Skills

DevSecOps

CI/CD pipelines

Vulnerability management

Security architecture

Remediation support

Release governance

Tools

GitHub Advanced Security

SonarQube

JFrog Artifactory

JFrog Xray

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

SBOM

Kubernetes/OpenShift

Job description

emagine is seeking a Senior DevSecOps Engineer in Portugal to embed security controls across the software delivery lifecycle. You will work hands-on on secure CI/CD, vulnerability management, and architecture patterns to safeguard application delivery pipelines.

You will collaborate with development teams to raise secure engineering practices, manage artifacts and dependencies, and enforce governance across environments.