Senior DevSecOps Engineer
New
J
JustMarketsProduct security
Location: EuropeFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- English (В1), Russian (fluent)
- Experience
- At least 3+ years of hands-on experience in DevSecOps engineering roles
- Required Skills
- PythonBashGitGoCI/CD
Requirements
- At least 3+ years of hands-on experience in DevSecOps engineering roles.
- Strong understanding of Git workflows and CI/CD pipelines, including designing reusable integrations and investigating failed jobs.
- Practical experience configuring SAST, SCA and secrets scanning, tuning rules, investigating false positives and routing results.
- Ability to write, test and maintain automation in a suitable language such as Python, Bash or Go, and integrate systems through APIs.
- Experience implementing security checks or policies as code with version control, testing and controlled changes.
- Practical experience securing and hardening cloud environments with at least one major cloud provider; AWS is preferred.
- Working knowledge of Linux and container-based build environments, including permissions, credentials and logs.
- Understanding of application, dependency and exposed-secret risks, and ability to distinguish tool failures from security findings.
- Ability to maintain coverage records, operational runbooks and reporting using pipeline, scanner and work-item data.
- Clear written and spoken English for technical discussions, troubleshooting and documentation.
- Fluent Russian.
Responsibilities
- Integrate and maintain SAST, SCA and secrets scanning in CI/CD pipelines and developer workflows.
- Build reusable pipeline integrations and security rules as code, including agreed cloud configuration checks.
- Test changes, plan safe rollouts with pipeline owners and verify required checks across the agreed scope.
- Tune scanner rules and configurations, validate changes with AppSec, record exclusions and provide useful developer feedback.
- Troubleshoot failed scans, broken integrations and security-related pipeline failures; restore controls or escalate blockers.
- Automate finding collection, duplicate handling, ticket creation and status updates.
- Ensure validated High pipeline and secrets findings have an owner, action and due date, and follow up on unresolved blockers.
- Work with AppSec and developers to validate findings, improve remediation guidance and check fixes.
- Maintain coverage records, troubleshooting guides and operational runbooks, and share knowledge with other engineers.
View Full Description & ApplyYou'll be redirected to the employer's site
