WISE INTEGRATION - Senior DevSecOps and Vulnerability Management Engineer
Requirements
• Approximately 8+ years of experience in DevOps or platform engineering, with strong practical DevSecOps expertise. • Proven experience implementing automated CI/CD security gates using GitHub Actions or Jenkins. • Hands-on experience managing vulnerabilities at scale, including findings aggregation, deduplication, risk-based prioritization, and remediation tracking. • Strong understanding of vulnerability scoring and prioritization frameworks, including CVSS, EPSS, and CISA KEV. • Ability to transform complex security findings into reliable, actionable reporting for non-technical stakeholders and senior management. • Ability to coordinate security remediation activities across engineering teams. • Experience with vulnerability aggregation and management platforms such as DefectDojo. • Container and Kubernetes security expertise. • Knowledge of software bill of materials (SBOM), software supply chain security, SLSA, and Sigstore. • Experience with Azure DevOps or AWS CodePipeline. • Dashboard development and security reporting using Power BI or Datadog. • Additional Info • Location: Lithuania or Poland • Start date: ASAP • Contract duration: 12 months • €38 - €42 an hour • We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Responsibilities
• Assess existing CI/CD pipelines, including GitHub Actions, Jenkins (Groovy), ArgoCD, Helm, and AWS CodePipeline, along with currently implemented security scanning tools. • Establish a unified vulnerability triage process to consolidate findings, eliminate duplicates, and prioritize risks using CVSS, EPSS, CISA KEV, and exploitability/reachability indicators. • Implement end-to-end vulnerability tracking, ensuring each finding has a designated owner and a documented resolution status (remediated, contained, or risk-accepted). • Integrate SAST, software composition analysis (SCA), secrets detection, container security, and infrastructure-as-code scanning into CI/CD pipelines, including security gates to prevent regression. • Establish branch management and repository hygiene practices to reduce accumulated vulnerabilities and prevent uncontrolled growth of security findings. • Deliver accurate weekly vulnerability management reports and progress metrics to the CISO and senior leadership. • During Phase 2, lead cloud and infrastructure engineering activities and vulnerability management operations within the DevOps team.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT