Senior DevSecOps & Product Security Engineer - Remote

Doxis; Porto; Híbrido; EUR 70 000 - 110 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Private healthcare

Udemy memberships

Udemy Business access

Flexible hours & hybrid/remote

Resumo da oferta

Doxis is seeking an experienced Senior DevSecOps & Product Security Engineer to design, automate and operate security across our cloud platform and SDLC. You will integrate automated controls into CI/CD pipelines and support regulatory compliance.

You will work closely with engineering and cloud operations to mature security posture, implement guardrails, and drive secure software delivery with hands-on tooling and scripting.

Qualificações

• 5+ years in Security Engineering or DevSecOps.
• Experience securing cloud-native SaaS products and production cloud platforms.
• Hands-on with CI/CD tools like GitHub Actions, Azure DevOps, GitLab CI or Jenkins.
• Knowledge of IAM, encryption, secrets management, and vulnerability management.

Responsabilidades

• Design and implement security controls across CI/CD pipelines.
• Automate SAST, SCA, secret detection, container scanning, IaC and DAST.
• Build policy-as-code, guardrails and automated compliance reporting.
• Secure cloud infrastructure, Kubernetes environments and deployment processes.
• Own vulnerability management, including scanning, remediation tracking and reporting.
• Support secure coding practices, threat modelling and design reviews.
• Assist with penetration testing, security assessments and audits.
• Improve detection, logging and incident response capabilities.
• Develop automation for evidence collection, reporting and dashboards.

Conhecimentos

Security Engineering

DevSecOps

Cloud Security

CI/CD

Threat Modelling

Ferramentas

Checkmarx

SonarQube

GitHub Advanced Security

Trivy

Snyk

Semgrep

OWASP ZAP

Descrição da oferta de emprego

Doxis is seeking an experienced Senior DevSecOps & Product Security Engineer to design, automate and operate security across our cloud platform and SDLC. You will integrate automated controls into CI/CD pipelines and support regulatory compliance.

You will work closely with engineering and cloud operations to mature security posture, implement guardrails, and drive secure software delivery with hands-on tooling and scripting.