← All positions

DevSecOps Engineer

Mid / Senior
New

17.000 – 18.000 RON Net

Iasi Hybrid

About the Client

Our client holds a prominent position in the European utilities sector, dedicated to seamlessly connecting people and businesses with energy and providing customer-centric solutions designed for sustainability.

The company develops cloud-based, state-of-the-art software applications in various areas - IoT/ IIoT, energy management & trading, predictive maintenance.

The Role

Responsibilities

  • Implement and integrate SAST, SCA, and secret scanning solutions within CI/CD pipelines to support continuous code security analysis.
  • Design and enhance secure DevOps workflows, including automated security controls, policy enforcement, quality gates, and developer feedback mechanisms.
  • Integrate security tooling with cloud environments, preferably Azure, to collect metadata, correlate findings, and support cloud security assessments.
  • Embed automated policy validation and compliance checks into GitLab CI/CD pipelines.
  • Promote and enforce application security and DevSecOps best practices across software delivery teams.
  • Improve scanning efficiency, detection accuracy, and overall platform performance.
  • Develop dashboards and reporting capabilities that track security posture, coverage, remediation timelines, and risk reduction trends.

Must-haves

  • Strong professional experience in DevSecOps and Application Security.
  • Solid understanding of application security principles, secure coding techniques, and common vulnerability categories such as the OWASP Top 10.
  • Knowledge of software supply chain security concepts, including artifact integrity, software signing, and SBOMs.
  • Experience building and securing software delivery pipelines using GitLab and/or Azure DevOps.
  • Hands-on expertise with at least one industry-standard SAST or SCA solution.
  • Practical experience with GitLab policy management and compliance controls.
  • Proficiency in Markdown for creating and maintaining technical documentation.
  • Experience with Infrastructure as Code using Terraform and/or OpenTofu.
  • Working knowledge of at least one major cloud platform, either Azure or AWS.

Nice-to-haves

  • Additional exposure to AWS is preferrable

Benefits

  • Annual performance bonus
  • 25 days of holiday
  • Medical Insurance
  • Many other perks

Selection Process

  • One informational interview with the Domain Lead
  • One technical interview with the Domain Lead and a team member, including the presentation of a practical task

Good to Know

  • The client values engineers who think like consultants. They expect you to be adaptable, proactive, and comfortable wearing multiple hats.
  • You may be asked to engage directly with business stakeholders to gather requirements and understand the bigger picture of the project you are involved in.
Loredana Albei

Loredana Albei

Technical Recruiter

Interested in this role? Reach out and let's talk.