devsecops engineer in secure software delivery

Andersen is a global software development company that delivers full-cycle IT services and helps enterprises and fast-growing mid-sized businesses accelerate digital transformation through modern, scalable, and secure software solutions. It operates across a global network of development centers with more than 3,500 professionals.

• Integrate security practices into CI/CD pipelines and development workflows;
• Implement automated security checks, vulnerability scanning, and compliance validation;
• Manage secrets, credentials, and access policies;
• Monitor cloud and infrastructure security configurations, identify risks, and implement improvements;
• Collaborate with development and security teams to ensure secure application delivery;
• Support incident response activities and contribute to root cause analysis;
• Develop automation scripts and tools to enhance security processes;
• Maintain documentation for security controls, processes, and best practices.

• Have 2.5+ years of experience as a DevSecOps Engineer;
• Understand CI/CD pipelines and have experience integrating security tools, including SAST, DAST, SCA, IaC scanning, and compliance control;
• Have hands-on experience with AWS, Azure, or GCP;
• Know container security, Docker, and Kubernetes security best practices;
• Be familiar with secrets management solutions such as HashiCorp Vault and AWS Secrets Manager;
• Have scripting skills in Python, Bash, or similar;
• Have experience with monitoring and logging tools such as ELK, Prometheus, and Grafana;
• Understand threat modeling, vulnerability management, and secure coding principles;
• Have English proficiency at Upper-Intermediate level or above;
• Nice to have: experience with Zero Trust, IAM, or security governance frameworks, knowledge of ISO 27001, SOC 2, or GDPR, AWS Security Specialty or CKS certification.

• Fully remote, office, or hybrid work options are available;
• Up to an additional 1,000 EUR per month depending on expertise, included in the annual bonus;
• Professional, financial, and career growth opportunities;
• Mentoring and onboarding systems for each new employee;
• Access to the corporate training portal;
• Certification compensation for AWS, PMP, and other certifications;
• Private health insurance and sports compensation depending on the type of employment;
• Referral program;
• Corporate events and activities.