DevSecOps Engineer (SSDLC / CI/CD Security)

We at Hack in Hire, are looking for a DevSecOps Engineer (SSDLC / CI/CD Security) to become part of our client's team.

Our client is a Spanish cybersecurity company based in Madrid. They are looking for an DevSecOps Engineer (SSDLC / CI/CD Security) to join a project focused on integrating and automating security controls within the software development lifecycle (SSDLC). The role is remote from Spain, with occasional on-site attendance, preferably in Madrid or Barcelona.

The role

You will work alongside development and DevOps teams, helping to bring in security analysis tools, automate controls and catch vulnerabilities early. We are looking for a hands-on technical profile who knows CI/CD processes and has experience integrating security tools into them. The goal is not only to detect vulnerabilities, but to make security a natural part of the development process.

Responsibilities

• Design, implement and maintain automated security controls in CI/CD pipelines.
• Integrate and configure SAST, SCA, DAST and secret scanning tools.
• Put security controls in place for infrastructure as code (IaC) and containers.
• Configure and maintain security gates and blocking criteria in pipelines.
• Work with development teams to interpret and fix the findings raised by the tools.
• Automate vulnerability analysis, validation and reporting processes.
• Make results traceable and integrate them with repositories and development tools.
• Support the generation and analysis of Software Bills of Materials (SBOM).
• Improve control quality, reducing false positives and avoiding unnecessary blocks.
• Develop scripts and automations that simplify recurring security tasks.
• Write technical documentation and integration guides for development teams.

Requirements

• At least 3 years of professional experience, with a minimum of 2 years in DevSecOps or CI/CD security.
• Experience working with CI/CD pipelines and Git repositories.
• Experience integrating SAST, SCA and/or DAST tools into development processes.
• Knowledge of tools such as SonarQube, Snyk, Checkmarx, Fortify, Veracode, OWASP ZAP or equivalents.
• Knowledge of GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps or similar tools.
• Experience with Docker and container security concepts.
• Knowledge of infrastructure as code, such as Terraform.
• Scripting and automation skills, preferably Python or Bash.
• Knowledge of vulnerability management and secure development good practices.
• English at B2 level or higher.

Nice to have

• Experience with secret scanning and tools such as Gitleaks.
• Knowledge of SBOM and software supply chain security.
• Experience configuring quality gates and security policies.
• Knowledge of Kubernetes and cloud platforms.
• Familiarity with OWASP and secure development standards.
• DevSecOps, cloud security or application security certifications.

Hiring process

1. Initial filter from Hack In Hire
2. Technical interview, where the Client team will assess your technical knowledge and you will have the opportunity to get to know each other.
3. HR interview, where the clients HR team will tell you more about the company and the position.
4. Technical assessment to demonstrate your skills.

📩 Interested? Apply via LinkedIn or submit your CV via hackinhire.com.