DevSecOps Engineer

The international IT сompany Andersen invites a DevSecOps Engineer to work on large-scale projects. Andersen is a pre-IPO global software development company with over 19 years of experience delivering full-cycle IT services. We specialize in helping enterprises and fast-growing mid-sized businesses accelerate their digital transformation through modern, scalable, and secure software solutions. Our company operates across a global network of 16 development centers, strategically located in North America, Western and Central Europe, the Middle East, and the Asia-Pacific region. With a strong team of over 3,500 highly skilled professionals, we combine deep domain expertise and advanced technical capabilities to consistently deliver exceptional results for our clients.

Responsibilities: - Integrating security practices into CI/CD pipelines and development workflows. - Implementing automated security checks, vulnerability scanning, and compliance validation. - Managing secrets, credentials, and access policies. - Monitoring cloud and infrastructure security configurations, identifying risks, and implementing improvements. - Collaborating with development and security teams to ensure secure application delivery. - Supporting incident response activities and contributing to root cause analysis. - Developing automation scripts and tools to enhance security processes. - Maintaining documentation for security controls, processes, and best practices.

Requirements: - Experience as a DevSecOps Engineer for 2,5+ years. - Strong understanding of CI/CD pipelines and experience integrating security tools (SAST, DAST, SCA, IaC scanning and compliancy control and others). - Hands-on experience with cloud platforms (AWS, Azure, or GCP). . - Knowledge of container security, Docker, and Kubernetes security best practices. - Familiarity with secrets management solutions (Hashicorp Vault, AWS Secrets Manager, etc.). - Scripting skills (Python, Bash, or similar) for automation. - Experience with monitoring and logging tools (ELK, Prometheus, Grafana). - Understanding of threat modeling, vulnerability management, and secure coding principles. - Level of English – from Upper-Intermediate and above.

Nice to have: - Experience with Zero Trust, IAM, or security governance frameworks. - Knowledge of compliance standards (ISO 27001, SOC 2, GDPR). - Certifications such as AWS Security Specialty, CKS.

Compensation: 2750–4800 EUR per month.