Senior DevSecOps Engineer — Secure Delivery Leader

Welvaart; Lisboa; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Welvaart in Lisbon is seeking a Senior DevSecOps Engineer to embed security controls and architecture patterns into the software delivery lifecycle for a Banking Project.

You will be hands-on with secure CI/CD enablement, vulnerability management, and collaboration with development teams to improve secure engineering practices and ensure source code, containers, and deployment artefacts are continuously assessed before production.

Qualificações

• Proven experience in DevSecOps, application security, or DevOps engineering.
• Strong hands-on experience with CI/CD pipelines and secure delivery practices.
• Experience with: GitHub Enterprise & GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory and Xray
• Strong understanding of vulnerability management and secure artifact lifecycle.
• Experience working directly with development teams in remediation efforts.
• Knowledge of Git workflows, release management, and deployment governance.

Responsabilidades

• Define and implement secure DevSecOps architectures and CI/CD security controls (SAST, SCA, secrets, containers, SBOM, quality gates)
• Integrate and manage security tools within development workflows
• Establish secure artifact management and controlled promotion across environments
• Manage vulnerabilities end‑to‑end: analysis, prioritization, remediation support, and reporting
• Configure GitHub security features and enforce repository and PR governance standards
• Maintain code quality and security policies using SonarQube
• Secure artifact repositories and dependencies using JFrog Artifactory and Xray
• Define branching strategies and enforce secure release and deployment controls
• Ensure traceability, auditability, and proper governance across the delivery lifecycle
• Support and enable development teams through guidance, training, and practical secure implementations

Conhecimentos

DevSecOps

CI/CD

Secure delivery

Vulnerability management

Team collaboration

Ferramentas

GitHub Advanced Security

SonarQube

JFrog Artifactory

Xray

GitHub Actions

Azure DevOps

Descrição da oferta de emprego

Welvaart in Lisbon is seeking a Senior DevSecOps Engineer to embed security controls and architecture patterns into the software delivery lifecycle for a Banking Project.

You will be hands-on with secure CI/CD enablement, vulnerability management, and collaboration with development teams to improve secure engineering practices and ensure source code, containers, and deployment artefacts are continuously assessed before production.