DevSecOps / Application Security Engineer

Do you want to shape the security posture of modern cloud-native platforms and protect critical data for global enterprises?

At Axiomatics, we develop Attribute-Based Access Control (ABAC) solutions that help banks, government agencies, and global enterprises protect critical data and control access to sensitive information. Here, you will work with cutting-edge technology and complex security challenges in an international environment.

Founded in 2006, Axiomatics specializes in dynamic authorization and fine-grained access control, helping organizations make secure, context-aware decisions about who can access what, when, and under which conditions. As a subsidiary of Leonardo S.p.A. — a global company operating in Aerospace, Defense, and Cyber Security — we combine the agility and innovation of a technology company with the stability and resources of a major international group.

We are seeking an experienced DevSecOps / Application Security Engineer to join our Engineering team in Athens, Greece, and help strengthen security across our software delivery lifecycle, cloud infrastructure, and CI/CD pipelines.

About the Role

In this hands-on role, you will act as the bridge between development and platform security, taking ownership of end-to-end vulnerability management, implementing automated security controls across our cloud-native infrastructure and CI/CD pipelines, and supporting compliance with demanding enterprise security standards.

Key Responsibilities

• Design, harden, and maintain CI/CD pipelines across GitHub Actions, Jenkins, and Bitbucket with automated security gates and break-the-build policies.
• Implement and manage SAST, SCA, and container security scanning (SonarQube, Snyk, JFrog Artifactory/Xray).

• Lead end-to-end vulnerability triage and prioritization based on reachability, exploitability, and business risk using CVSS, EPSS, and CISA KEV.

• Conduct DAST and API security assessments (OWASP ZAP, Burp Suite, Snyk API & Web) aligned with OWASP Top 10 and OWASP API Security Top 10.

• Secure AWS cloud infrastructure, Kubernetes clusters (EKS), and Helm charts using GitOps workflows via ArgoCD.

• Audit and enforce Infrastructure as Code (IaC) security using Terraform/CloudFormation and scanning tools (Checkov, Trivy).

• Oversee supply-chain security, including SBOM management, image signing with Cosign, and CVE remediation.

• Support compliance-driven engineering (ISO 27001, SOC 2, Cyber Resilience Act) by mapping technical evidence and participating in audits.

• Conduct threat modeling (STRIDE/OWASP) and collaborate closely with engineering teams to promote secure coding practices.

Your Profile

To succeed in this role, you are an experienced DevSecOps or Application Security Engineer who takes ownership of security outcomes from design through to remediation. You communicate security risks clearly to engineers, product colleagues, and stakeholders, building trust through expertise, professionalism, and reliability, and influencing technical teams without direct authority.

Qualifications & Experience

• 5+ years of overall professional experience in DevOps, DevSecOps, or platform security engineering, including at least 3+ years with a dedicated focus on application security, CI/CD security, or DevSecOps practices.

• Deep hands-on experience with AWS (EKS, ECR, IAM, VPC, Secrets Manager) and Kubernetes in production.

• Strong scripting skills in Python and Bash, including workflow automation via REST APIs (Jira, Slack, Snyk, SonarQube).

• Working knowledge of the Java build ecosystem (Maven, Gradle) and remediation of vulnerable transitive dependencies.

• Hands-on experience with secrets management, SIEM logging, access reviews, and incident response.

• Excellent written and spoken English.

Nice to Have

• Relevant certifications: CKS, AWS Security Specialty, or OSCP.

• Experience with identity and authorization protocols: OAuth 2.0 / OIDC, Keycloak, ABAC, XACML.

• Experience with Policy-as-Code (OPA, Kyverno) and advanced supply-chain standards (SLSA provenance, VEX).

• Exposure to cloud runtime security and posture management tools (GuardDuty, SecurityHub, Falco) or secrets detection (Gitleaks, TruffleHog).

• Hands-on penetration testing skills.

Our Values

• Deliver innovation – We are passionate about providing unique expertise and support.

• Easy to do business with – We strive to create positive experiences for partners and customers.

• Customer focus – Our solutions are designed to simplify the customer’s everyday work while enhancing security.

• Results-driven – We continuously improve our products, processes, and relationships.

• Empower others – We collaborate openly and respectfully with colleagues, customers, and partners.

What Axiomatics Offers

• Cutting-Edge Security Impact: Opportunity to work with advanced, policy-based authorization technology within a leading cybersecurity company.

• EMEA Enterprise Exposure: Exposure to some of the most security-sensitive and complex organizations across the EMEA region.

• Flexible Workstyle in Greece: Flexible hybrid working model with home office support.

• Competitive Compensation & Health: Highly competitive compensation package and private health insurance.

• Continuous Professional Growth: Continuous learning opportunities, access to security certifications, and modern tooling.

Practical Information

• Pay Transparency: The applicable salary range will be communicated to candidates invited for an assessment interview, in accordance with applicable Greek and EU pay transparency requirements (Greek Law 5316/2026 & EU Directive 2023/970).
• Application Process: Recruitment managed by Randstad on behalf of Axiomatics.

Please submit your updated CV via the "Apply" option. Only applications submitted through the Randstad online portal will be considered. Shortlisted candidates will be contacted for an interview and may be invited to complete a short video interview. All applications will be treated confidentially.

• Questions? For any questions about this position, please contact Konstantinos Adamopoulos at Randstad by phone at 6940080281 (Monday to Friday) or kadamopoulos@randstad.gr.