DevSecOps (Lisbon)

The Role We are looking for a DevSecOps & Security Operations Engineer to help strengthen our application security, DevSecOps practices and operational security capabilities.

Working closely with Engineering, DevOps and the CISO, you will ensure security is integrated into our development processes, support vulnerability management and provide operational reporting and governance across the security programme.

Key Responsibilities

, Maintain and enhance security tooling across Azure DevOps CI/CD pipelines including secrets scanning, SCA, SAST, IaC scanning, container scanning, DAST/API testing and vulnerability gates.

, Triage findings, coordinate remediation, manage exceptions and report risks.

, Partner with DevOps and Engineering to optimise security controls.

, Support vulnerability management across applications, cloud, containers and IaC.

, Assist with incident response, post-incident reviews and continuous improvement.

, Automate repetitive security processes where practical.

, Produce security dashboards, metrics, evidence packs and executive reporting.

, Support risk registers, audit evidence and security governance.

Skills & Experience

, Experience in DevSecOps, Security Operations or Application Security.

, Azure DevOps CI/CD experience.

, Knowledge of SAST, DAST, SCA, IaC and container security.

Vulnerability management experience.

, Azure cloud security knowledge.

, Strong communication and stakeholder management skills.

Desirable Financial services or insurance experience, security certifications (CISSP, Security+, AZ-500, SC-200/300, CSSLP), scripting (Python/PowerShell), audit and compliance experience.

Venquis is acting as an Employment Agency in relation to this vacancy.