DevSecOps Engineer
The international IT сompany Andersen invites a DevSecOps Engineer to work on large-scale projects. Andersen is a pre-IPO global software development company with over 19 years of experience delivering full-cycle IT services. We specialize in helping enterprises and fast-growing mid-sized businesses accelerate their digital transformation through modern, scalable, and secure software solutions. Our company operates across a global network of 16 development centers, strategically located in North America, Western and Central Europe, the Middle East, and the Asia-Pacific region. With a strong team of over 3,500 highly skilled professionals, we combine deep domain expertise and advanced technical capabilities to consistently deliver exceptional results for our clients.
Responsibilities
- Integrating security practices into CI/CD pipelines and development workflows.
- Implementing automated security checks, vulnerability scanning, and compliance validation.
- Managing secrets, credentials, and access policies.
- Monitoring cloud and infrastructure security configurations, identifying risks, and implementing improvements.
- Collaborating with development and security teams to ensure secure application delivery.
- Supporting incident response activities and contributing to root cause analysis.
- Developing automation scripts and tools to enhance security processes.
- Maintaining documentation for security controls, processes, and best practices.
Requirements
- Experience as a DevSecOps Engineer for 2,5+ years.
- Strong understanding of CI/CD pipelines and experience integrating security tools (SAST, DAST, SCA, IaC scanning and compliancy control and others).
- Hands-on experience with cloud platforms (AWS, Azure, or GCP). .
- Knowledge of container security, Docker, and Kubernetes security best practices.
- Familiarity with secrets management solutions (Hashicorp Vault, AWS Secrets Manager, etc.).
- Scripting skills (Python, Bash, or similar) for automation.
- Experience with monitoring and logging tools (ELK, Prometheus, Grafana).
- Understanding of threat modeling, vulnerability management, and secure coding principles.
- Level of English – from Upper-Intermediate and above.
Nice to have
- Experience with Zero Trust, IAM, or security governance frameworks.
- Knowledge of compliance standards (ISO 27001, SOC 2, GDPR).
- Certifications such as AWS Security Specialty, CKS.
Compensation: 2750–4800 EUR per month.