RemoteLeaf Logo
Log in Sign up

Senior DevSecOps and Vulnerability Management Engineer

49 minutes ago
Lithuania, Poland
Contract
Lead
Application Security Engineer
DevOps and Infrastructure
Argo CD AWS Azure C# CI/CD Datadog DevSecOps GitHub Actions Groovy Helm Java Jenkins Kubernetes Node.js PHP Power BI Ruby TypeScript
Apply Now
HITCONTRACT

HITCONTRACT

HITCONTRACT is a leading IT recruitment agency in Baltic and Scandinavian countries, offering innovative services with a success fee model for guaranteed results.

Professional Services
11-50
Founded 2015
View All Jobs 8

Description

  • Assess CI/CD pipelines and existing security scanning tools across GitHub Actions, Jenkins, ArgoCD, Helm, and AWS CodePipeline.
  • Establish a unified, risk-based vulnerability triage process that consolidates findings, removes duplicates, and prioritizes remediation.
  • Implement end-to-end vulnerability tracking with assigned owners and documented remediation, containment, or risk-acceptance status.
  • Integrate SAST, SCA, secrets detection, container security, and infrastructure-as-code scanning into CI/CD pipelines.
  • Implement security gates to prevent vulnerability regressions in software delivery.
  • Establish branch management and repository hygiene practices to reduce security finding backlogs.
  • Deliver weekly vulnerability reports and progress metrics to the CISO and senior leadership.
  • Lead cloud and infrastructure engineering activities and vulnerability management operations within the DevOps team during Phase 2.

Requirements

  • Approximately 8+ years of DevOps or platform engineering experience with practical DevSecOps expertise.
  • Experience implementing automated CI/CD security gates using GitHub Actions or Jenkins.
  • Hands-on experience managing vulnerabilities at scale, including aggregation, deduplication, risk-based prioritization, and remediation tracking.
  • Strong knowledge of CVSS, EPSS, CISA KEV, and vulnerability exploitability or reachability indicators.
  • Ability to turn complex security findings into actionable reporting for senior and non-technical stakeholders.
  • Ability to coordinate security remediation across engineering teams.
  • Experience with vulnerability management platforms such as DefectDojo (preferred).
  • Container and Kubernetes security expertise (preferred).
  • Knowledge of SBOMs, software supply-chain security, SLSA, and Sigstore (preferred).
  • Experience with Azure DevOps or AWS CodePipeline, and security dashboards in Power BI or Datadog (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

ClearCapital.com,

Senior Application Security Engineer

ClearCapital.com, 1-10 Real Estate

As a Sr. Application Security Engineer, strengthen the security of application services, connected systems, and AI-enabled products by identifying vulnerabilities and driving secure development practices across the software lifecycle.

United States Full-time Senior Application Security Engineer
$111k-$144k
AWS C++ Java JavaScript Penetration Testing PHP PowerShell Python Ruby
19 minutes ago
OneStream Software

Application Security Engineer

OneStream Software 1001-5000 Internet Software & Services

OneStream is hiring a remote Application Security Engineer to strengthen the security of its modern Finance platform by embedding practical application security throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$114k-$148k
Burp Suite C# CI/CD DevSecOps .NET PowerShell Python
2 days, 21 hours ago
Lever

Web Developer Security Engineer

Lever 201-500 Professional Services

Spry Methods seeks a Web Developer Security Engineer to embed application security across mission-critical federal and DoD web applications, APIs, and sensitive data throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$135k-$155k
CSS Cybersecurity DevSecOps HTML JavaScript .NET REST API SQL
1 week ago
Bitly

Staff Application Security Engineer (R5949)

Bitly 201-500 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to lead the evolution of its developer-centered secure SDLC and software supply-chain security program for defense technology products.

Anywhere Full-time Lead Application Security Engineer
$143k-$214k
Burp Suite CI/CD DevSecOps Kubernetes Microservices SonarQube
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers