Cybersecurity engineer

Overview

In this role you will advance automated, scalable DevSecOps within a large organization by embedding security into the SDLC. You’ll work in an Application Security and SSDLC team to evolve security controls from early development stages. You’ll automate SAST/SCA in CI/CD, tune rules, and support remediation with developers.

The position offers a hands-on, collaborative environment focused on continuous improvement of security processes and credentials management, with a clear impact on product security.

• hybrid working model
• teleworking 8 weeks/year
• flexible start/finish times
• career plan development and training
• national and international mobility
• relocation package available

• Automate and integrate SAST/SCA controls into CI/CD pipelines
• Configure, administer, and optimize security tools and onboard applications to DevSecOps
• Define and maintain Security Gates and scanning strategies
• Analyze vulnerabilities, manage false positives, and tune detection rules
• Develop automation and integrations using APIs and scripting
• Troubleshoot issues across security tools, pipelines, and integrations
• Support developers with vulnerability remediation and revalidation
• Contribute to ongoing improvement of SSDLC controls and secure credential management

• Practical experience in Application Security and DevSecOps with SAST/SCA in CI/CD environments
• Knowledge of CI/CD, Git, and code repositories
• Understanding of OWASP Top 10, CWE, CVE, and CVSS; vulnerability and false-positive analysis
• Secure development and SSDLC with automated controls and Security Gates
• APIs and scripting experience (Python, PowerShell, or Bash)
• Tool and pipeline integration and troubleshooting
• Secure management of credentials, tokens, and secrets
• Ability to analyze code and collaborate with development teams

• cross-functional collaboration
• analytical thinking
• problem solving
• CI/CD experience
• Git and code repositories
• SAST/SCA integration