DevSecOps Engineer
Where exceptional talents scale what matters.
Swicon Minds is a curated community of 450+ senior top talents working on complex enterprise challenges, while operating within a stable, structured, and supportive ecosystem.
Summary
Bucharest, ROU
Remote
Medior
Introduction
Swicon Group is one of the leading members of the IT arena for almost a decade, since 2017 present also in Romania. Our wide range of services and highly trained professionals give us the opportunity to shape our solutions to fully meet the ideas and wishes of our clients. We are proud to have leading banks, insurance and telecommunication companies, as well as large FMCG corporations and SSCs amongst our highly prestigious partners.
Description
As a DevSecOps Engineer, you will play a crucial role in integrating security practices into our software development and operations processes. You will collaborate with development teams, security professionals, and operations personnel to ensure the secure design, development, deployment, and maintenance of our systems and applications.
SecOps Principal duties and Responsibilities:
● Collaborate with cross-functional teams to identify security requirements, define security controls, and embed security into the development and operations processes.
● Collaborate with cross-functional teams, promoting communication, and facilitating the adoption of security practices throughout the development process.
● Conduct security assessments, vulnerability scans, and penetration tests and collaborate with development and operations teams to fix vulnerabilities and ensure secure coding practices are followed.
● Perform regular security audits to identify potential security breaches or anomalies.
● Provide guidance and support to development teams in implementing secure coding practices, secure configuration management, and secure deployment strategies.
● Stay up to date with the latest industry trends, security threats, and best practices related to DevSecOps, and recommend improvements and enhancements to security practices.
● Participate in threat modeling exercises to identify potential security risks and vulnerabilities in software applications or infrastructure.
DevOps (Optional) duties and Responsibilities:
● Design, develop, and implement secure DevOps practices, processes, and toolchains to integrate security into the software development lifecycle (SDLC).
● Implement and maintain security monitoring and incident response capabilities to detect and respond to security incidents.
● Develop and maintain secure infrastructure configurations, including network architecture, access controls, and authentication mechanisms.
● Automate security controls and processes to enable continuous integration, continuous delivery, and continuous deployment (CI/CD) pipelines.
● Collaborate with the operations team to ensure the secure operation and maintenance of infrastructure, platforms, and applications.
Tasks
As a DevSecOps Engineer, you will play a crucial role in integrating security practices into our software development and operations processes. You will collaborate with development teams, security professionals, and operations personnel to ensure the secure design, development, deployment, and maintenance of our systems and applications.
SecOps Principal duties and Responsibilities:
● Collaborate with cross-functional teams to identify security requirements, define security controls, and embed security into the development and operations processes.
● Collaborate with cross-functional teams, promoting communication, and facilitating the adoption of security practices throughout the development process.
● Conduct security assessments, vulnerability scans, and penetration tests and collaborate with development and operations teams to fix vulnerabilities and ensure secure coding practices are followed.
● Perform regular security audits to identify potential security breaches or anomalies.
● Provide guidance and support to development teams in implementing secure coding practices, secure configuration management, and secure deployment strategies.
● Stay up to date with the latest industry trends, security threats, and best practices related to DevSecOps, and recommend improvements and enhancements to security practices.
● Participate in threat modeling exercises to identify potential security risks and vulnerabilities in software applications or infrastructure.
DevOps (Optional) duties and Responsibilities:
● Design, develop, and implement secure DevOps practices, processes, and toolchains to integrate security into the software development lifecycle (SDLC).
● Implement and maintain security monitoring and incident response capabilities to detect and respond to security incidents.
● Develop and maintain secure infrastructure configurations, including network architecture, access controls, and authentication mechanisms.
● Automate security controls and processes to enable continuous integration, continuous delivery, and continuous deployment (CI/CD) pipelines.
● Collaborate with the operations team to ensure the secure operation and maintenance of infrastructure, platforms, and applications.
Expectations
Qualifications:
● Bachelor’s degree in computer science, Information Security, or a related field (or equivalent work experience).
● Proven experience working as a DevSecOps Engineer or in a similar role.
● Strong knowledge of secure software development practices, secure coding principles, and secure configuration management.
● Cloud Automation including Terraform and Cloud Formation.
● Experience with DevOps methodologies, tools, and processes, including CI/CD pipelines and infrastructure-as-code (IaC).
● Familiarity with security technologies and tools, such as vulnerability scanners, penetration testing tools, and security information and event management (SIEM)
systems.
● Solid understanding of network security, authentication mechanisms, access controls, and encryption technologies.
● Experience with Azure cloud platform and associated security controls.
● Knowledge of containerization technologies (e.g., Docker, Kubernetes) and their security considerations.
● Strong scripting and automation skills (e.g., Python, PowerShell, Bash).
● Certifications such as Certified DevSecOps Professional (CDP), Certified Secure Software Lifecycle Professional (CSSLP), or Certified Cloud Security Professional
(CCSP) are a plus.
● Excellent problem-solving skills and the ability to work effectively in a fast-paced, collaborative team environment.
● Strong communication skills with the ability to convey complex security concepts to technical and non-technical stakeholders.
Advantages
- Excellent learning opportunities! Variety in your work and a fantastic, informal work atmosphere.
- A challenging environment that will stimulate you to grow as a professional!
- A great foundation for your career!
- Grow with us! Your role will develop over time, so you can increase your experience and responsibilities. So, you can advance faster and further in your future career.
- A friendly and welcoming work environment with an international working atmosphere where you can practice and learn new language skills with a diverse mix of colleagues and clients.
- A dynamic work environment with a culture that is open, innovative, and performance orientated.
Employer's offer
remote position and B2B possibility
Apply for this position
Are you suitable for this positon? Click on the apply button and upload your CV!
Share this position
Share this position on your social media platform to help a friend to find his/her dreamjob!
DevSecOps Engineer
Please provide your information!
Swicon Stories
Real people. Real challenges. Real impact.
„The whole hiring process was a really positive experience for me. I was given the opportunity to move forward professionally and to test myself in a new, more senior role. I was trusted from the start, and I had all the support I needed to take the next step in my career with confidence. They connected me with the right technical contact, and every question I had was answered quickly and clearly, so I never felt left on my own. Communication was smooth, each step built on the one before, and the whole process moved surprisingly fast and without a hitch.”
K. R. – Solution Architect
“Looking back over more than 15 years, Swicon gets top marks from me: it has built itself into a fast-growing multinational, and all the while it has backed its people professionally across the board — it even supported my PMP certification with a proper training course.”
B. T. – Sr. Projectmanager
“I’ve been working with SWICON for almost a year and a half now, and it’s been a positive experience from start to finish. Both the hiring process and the admin side of things ran smoothly, and whenever I had a question, help came quickly. I particularly appreciate how kind and helpful my colleagues are, and the fact that the company genuinely invests in building a community — there are regular programmes and events.
I’ve grown a lot professionally in my time here, too. My tasks and my responsibilities have kept widening, I’ve been able to take on more complex challenges, and I’ve also had the chance to support and mentor others. On the IT side I’ve been given opportunities that made a real difference to where I am professionally, so on the whole I see SWICON as a supportive place that gives you genuine room to grow.”
M. L. – Software developer
Powering mission – critical operations across Europe
200+
successful transformation programs
$1.5B
business value created
50M
secure transactions every month
20+
years of enterprise expertise
450+
senior experts
Trusted by enterprise leaders across the world
