RemoteLeads Logo
Sign Up Sign In

Senior DevSecOps and Vulnerability Management Engineer

2 days, 13 hours ago
Lithuania, Poland
Contract
Lead
Application Security Engineer
DevOps and Infrastructure
Argo CD AWS Azure C# CI/CD Datadog DevSecOps GitHub Actions Groovy Helm Java Jenkins Kubernetes Node.js PHP Power BI Ruby TypeScript
Apply Now
HITCONTRACT

HITCONTRACT

HITCONTRACT is a leading IT recruitment agency in Baltic and Scandinavian countries, offering innovative services with a success fee model for guaranteed results.

Professional Services
11-50
Founded 2015
View All Jobs 7

Description

  • Assess CI/CD pipelines and existing security scanning tools across GitHub Actions, Jenkins, ArgoCD, Helm, and AWS CodePipeline.
  • Establish a unified, risk-based vulnerability triage process that consolidates findings, removes duplicates, and prioritizes remediation.
  • Implement end-to-end vulnerability tracking with assigned owners and documented remediation, containment, or risk-acceptance status.
  • Integrate SAST, SCA, secrets detection, container security, and infrastructure-as-code scanning into CI/CD pipelines.
  • Implement security gates to prevent vulnerability regressions in software delivery.
  • Establish branch management and repository hygiene practices to reduce security finding backlogs.
  • Deliver weekly vulnerability reports and progress metrics to the CISO and senior leadership.
  • Lead cloud and infrastructure engineering activities and vulnerability management operations within the DevOps team during Phase 2.

Requirements

  • Approximately 8+ years of DevOps or platform engineering experience with practical DevSecOps expertise.
  • Experience implementing automated CI/CD security gates using GitHub Actions or Jenkins.
  • Hands-on experience managing vulnerabilities at scale, including aggregation, deduplication, risk-based prioritization, and remediation tracking.
  • Strong knowledge of CVSS, EPSS, CISA KEV, and vulnerability exploitability or reachability indicators.
  • Ability to turn complex security findings into actionable reporting for senior and non-technical stakeholders.
  • Ability to coordinate security remediation across engineering teams.
  • Experience with vulnerability management platforms such as DefectDojo (preferred).
  • Container and Kubernetes security expertise (preferred).
  • Knowledge of SBOMs, software supply-chain security, SLSA, and Sigstore (preferred).
  • Experience with Azure DevOps or AWS CodePipeline, and security dashboards in Power BI or Datadog (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Radicle Health

Application Security Engineer (Contractor)

Radicle Health 11-50 Internet Software & Services

Radicle Health is seeking a remote Application Security Engineer on a 12-month contract to embed scalable security practices and tooling across its 10 human-services SaaS platforms.

Anywhere Contract Mid Level Application Security Engineer
$129k-$129k
AWS Cybersecurity HIPAA OWASP Penetration Testing
13 hours, 6 minutes ago
Radicle Health

GovRAMP Project Manager (Contractor)

Radicle Health 11-50 Internet Software & Services

Radicle Health is hiring a remote, 12-month contract Project Manager to coordinate cross-functional delivery of its GovRAMP compliance initiative and keep milestones, risks, resources, and stakeholders aligned.

Anywhere Contract Senior Project Manager
$150k-$150k
Agile JIRA
13 hours, 6 minutes ago
GoFasti

1187 - Cloud Infrastructure Engineer I

GoFasti 51-200 Internet Software & Services

GoFasti is hiring a remote, Latin America-based Cloud Infrastructure Engineer I for an evening shift to support and improve a banking client’s secure, reliable cloud infrastructure.

Latin America Contract Mid Level Infrastructure Engineer
$42k-$50k
Ansible AWS Azure DHCP DNS HTTP Jenkins TCP/IP Terraform
13 hours, 21 minutes ago
Quadcode

Linux Administrator (Ops)

Quadcode 201-500 Internet Software & Services

Quadcode is hiring a remote Linux Administrator to support and improve the secure, reliable production infrastructure powering its large-scale fintech trading platform.

Belarus Bulgaria Estonia Finland Greece Moldova Montenegro Poland Romania Serbia United Arab Emirates Armenia Georgia Kyrgyzstan Uzbekistan Contract Mid Level Systems Administrator
Agile Ansible Apache Airflow AWS Bash CI/CD ClickHouse Docker GitLab CI Go Grafana Helm Jenkins Kafka Kubernetes Linux Nginx PHP PostgreSQL Prometheus Python Scrum Ubuntu
13 hours, 36 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers