Senior DevSecOps Engineer
New
J
JustMarketsFinancial technology
Location: EuropeFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Upper-Intermediate English proficiency and higher; Fluent Ukrainian
- Required Skills
- PythonBashGitGoCI/CD
Requirements
- Proven experience owning security tooling in production CI/CD pipelines, including integration design, rollout and ongoing maintenance.
- Strong understanding of Git workflows and CI/CD pipelines, including reusable integrations, failed-job investigation and change-impact assessment.
- Practical experience configuring and tuning SAST, SCA and secrets-scanning tools, investigating false positives and routing results to responsible teams.
- Ability to write, test and maintain automation in Python, Bash, Go or a similar language, including API integrations.
- Experience implementing security checks or policies as code with version control, testing and controlled changes.
- Hands-on experience securing and hardening cloud environments and implementing automated compliance checks against agreed requirements.
- Working knowledge of Linux and container-based build environments, including permissions, credentials and logs.
- Understanding of application, dependency and exposed-secret risks, and ability to distinguish tool failures from security findings.
- Ability to work independently, take ownership of technical decisions and coordinate with cross-functional teams.
- Upper-Intermediate English proficiency and higher.
- Fluent Ukrainian.
Responsibilities
- Integrate and maintain SAST, SCA and secrets scanning across CI/CD pipelines and developer workflows.
- Build reusable pipeline integrations and security rules as code, including cloud configuration checks with Cloud Security and DevOps.
- Test changes, plan safe rollouts with pipeline owners, and verify required checks across the agreed pipeline scope.
- Tune scanner rules and configurations to reduce false positives and provide actionable developer feedback without masking real risks.
- Troubleshoot failed scans, broken integrations and security-related pipeline failures; restore controls or escalate blockers.
- Automate finding collection, deduplication, ticket creation and status updates, ensuring validated High findings have an owner, action and due date.
- Work with AppSec and developers to validate findings, improve remediation guidance and turn recurring issues into reusable checks.
- Maintain coverage records, troubleshooting guides and operational runbooks, and share knowledge across the team.
View Full Description & ApplyYou'll be redirected to the employer's site
