DevSecOps Security Engineer: Secure SDLC Champion

EPAM Systems; Göteborgs kommun; On-site; SEK 700,000 - 900,000; Full time

Benefits offered by this job

ESPP

Pension plan

Private healthcare

Life insurance

Gym discounts

Wellness grant

Learning and development

Job summary

EPAM Systems in Göteborg seeks a DevSecOps engineer to blend development with information security, guiding security practices across CI/CD and DevOps. You will collaborate with engineering, DevOps, and risk teams to make secure ways of working the default, securing AI, cloud platforms, and enterprise-scale systems.

The role emphasizes security tooling, automation, and policy development within a modern SDLC, with opportunities to influence security posture across projects in a dynamic client

Qualifications

• 3+ years of experience in information security.
• 3+ years of security testing (SAST, SCA, DAST, container security) with Fortify/WebInspect/Prisma Cloud family.
• 3+ years of embedding security into CI/CD pipelines.
• 3+ years of experience with agile methodologies and DevSecOps.
• 2+ years securing containerized environments (Docker, Kubernetes) and VMs.
• 2+ years with Azure, Azure DevOps and GitHub.
• Scripting skills and strong communication are essential.

Responsibilities

• Provide security expertise and guidance to DevSecOps and enablement teams.
• Define and document security processes and create hardening guides and policies.
• Document and drive adoption of secure engineering best practices.
• Develop and evolve information security policies.
• Integrate, configure and manage security tools to support DevSecOps.
• Develop scripts to automate security processes.
• Establish mechanisms and tools for security automation within the SDLC.
• Document the use of security tools and processes.

Skills

CI/CD security integration

DevSecOps

Agile methodologies

Automation scripting

Security monitoring

Communication skills

Tools

Fortify

WebInspect

Fortify SSC

Nexus IQ

Prisma Cloud

Docker

Kubernetes

Azure

Azure DevOps

GitHub

Terraform

Ansible

SAST

SCA

DAST

Job description

EPAM Systems in Göteborg seeks a DevSecOps engineer to blend development with information security, guiding security practices across CI/CD and DevOps. You will collaborate with engineering, DevOps, and risk teams to make secure ways of working the default, securing AI, cloud platforms, and enterprise-scale systems.

The role emphasizes security tooling, automation, and policy development within a modern SDLC, with opportunities to influence security posture across projects in a dynamic client