Ingenieur DevSecOPS H/F
Core
Securing CI/CD pipelines, automating security tests, and implementing security practices within the software development lifecycle for a financial services group.
Role type
DevSecOps Engineer
Builds
Secure CI/CD workflows, containerized applications, and cloud-native infrastructure
Domain
Financial services, Cloud Security, DevOps
Required skills
CI/CD automation, SAST/DAST/SCA tools, Kubernetes (RKE2), GCP, Terraform, Ansible, Python, Bash, OWASP, IAM, vulnerability management, security by design, shift-left
Preferred skills
Java, C#, Angular, Zero Trust architecture, banking/regulatory environment experience, GCP/Kubernetes/CISSP/CEH certifications
Technologies
GitLab CI, Nexus, Harbor, Argo CD, Docker, Kubernetes, GCP, Terraform, Ansible, Python, Bash
Responsibilities
Secure CI/CD pipelines and automate security tests in build/deployment workflows; Integrate security tools (SAST, DAST, SCA) to ensure deployment quality and traceability; Implement security by design and shift-left practices; Identify, analyze, and contribute to remediation of application and infrastructure vulnerabilities; Participate in designing and securing Kubernetes RKE2 and GCP cloud architectures; Integrate security into infrastructure as code using Terraform and Ansible; Sensitize production teams to security best practices and assist developers in fixing vulnerabilities; Monitor security indicators, incidents, and vulnerabilities; Conduct regular technology scouting in DevSecOps, Cloud, and Cybersecurity
Seniority
Mid-Senior (3-8 years experience)