Explore exciting opportunities at Xtedder and join our dynamic team!

Job Description:

We are looking for a DevSecOps Engineer with experience in DevOps, application security and CI/CD automation. The professional will focus on integrating security practices across the software development lifecycle and implementing security controls in cloud environments and container-based architectures.

Responsibilities:

• Integrate security controls into CI/CD pipelines.

• Automate vulnerability analysis and security testing throughout the development lifecycle.

• Implement SAST, DAST, SCA and container security scanning tools.

• Collaborate with development teams to promote secure coding practices.

• Define and implement security policies for Infrastructure as Code (IaC).

• Monitor vulnerabilities in dependencies, libraries and container images.

• Support the design of secure architectures for cloud and microservices applications.

• Implement secrets and credentials management mechanisms.

• Contribute to the automation of compliance and security checks within delivery pipelines.

•  

• Work with security teams on vulnerability response and mitigation.

Requirements:

• Experience in DevOps, DevSecOps or application security.

• Knowledge of CI/CD pipelines (e.g., Jenkins, GitLab CI/CD, GitHub Actions, Azure DevOps).

• Experience with Infrastructure as Code (e.g., Terraform, ARM, CloudFormation).

• Experience with containers and orchestration (Docker, Kubernetes).

• Knowledge of cloud platforms (Azure, AWS or GCP).

• Experience with vulnerability management and application security.

• Security Tools

  • SAST (e.g., SonarQube, Checkmarx, Fortify)

  • DAST

  • SCA (Software Composition Analysis)

  • Container security scanning

• Nice to Have

  • Experience with Kubernetes security.

  • Knowledge of OWASP Top 10 and secure coding practices.

  • Experience with secrets management (e.g., Vault, Azure Key Vault, AWS Secrets Manager).

  Experience with security monitoring and observability.

   

  Certifications (preferred)

   

  • • Certified Kubernetes Security Specialist (CKS)

    • AWS or Azure Security certifications

    • CSSLP or similar certifications

Shape your future with us @Xtedder

Av. Engenheiro Duarte Pacheco Amoreiras
Torre 1, Piso 3 S9
1070-101
Lisbon, Portugal