YourITeams is looking for an experienced DevSecOps and Vulnerability Management Engineer to join a newly formed security team supporting a US-based SaaS provider. This role is focused on strengthening security practices across development pipelines, cloud infrastructure, and vulnerability management processes for a platform serving public-sector agencies.
Key responsibilities
- Assess and improve CI/CD pipelines using tools like GitHub Actions, Jenkins, ArgoCD, and AWS CodePipeline.
- Design and implement a unified vulnerability triage process to consolidate findings and prioritize risks using CVSS, EPSS, and CISA KEV frameworks.
- Integrate SAST, SCA, secrets detection, and container security into CI/CD pipelines to establish effective security gates.
- Produce regular vulnerability management reports and progress metrics for senior leadership and the CISO.
- Coordinate remediation activities across engineering teams and translate technical findings into actionable information.
Requirements
- Approximately 8+ years of experience in DevOps or platform engineering with substantial DevSecOps expertise.
- Proven experience implementing automated CI/CD security gates and managing vulnerabilities at scale.
- Strong understanding of vulnerability scoring frameworks and risk-based prioritization.
- Demonstrated ability to prepare reliable reporting for non-technical stakeholders and senior management.
- Capacity to lead technical initiatives and coordinate cross-team security remediation efforts.
What we offer
- Opportunity to shape a dedicated security team for a high-impact SaaS provider.
- Fully remote work environment.
- Unique TEAL culture that values relationships and respect.
- Access to Luxmed Gold Extended medical care and Multisport Plus benefits.
- Regular integration trips to various locations in Europe.