Senior DevSecOps Engineer

Emagine is seeking a Senior DevSecOps Engineer to strengthen security across the software delivery lifecycle, embedding security controls, governance, and DevSecOps practices into CI/CD pipelines and development workflows. The role combines hands-on DevSecOps engineering, application security, vulnerability management, secure delivery enablement, and collaboration with development teams to ensure secure, compliant, and reliable software releases.

What You'll Be Working On

• Design and implement secure DevSecOps architectures, embedding SAST, SCA, secrets detection, SBOMs, container security, and automated quality gates into CI/CD pipelines.
• Manage and optimize security platforms including GitHub Advanced Security, SonarQube, and JFrog Artifactory & Xray.
• Drive vulnerability management activities, from identification and prioritization to remediation support and reporting.
• Establish secure artifact management, release governance, and deployment controls across environments.
• Ensure traceability, auditability, and compliance throughout the software delivery lifecycle.
• Support engineering teams through guidance, training, and hands-on implementation of secure development practices.

What We're Looking For

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent professional experience.
• 5+ years of experience in DevSecOps, Application Security, DevOps Engineering, or similar roles.
• Strong experience with GitHub Enterprise, GitHub Advanced Security, SonarQube, and JFrog Artifactory/Xray.
• Hands-on experience securing CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or GitLab CI.
• Knowledge of SAST, SCA, secrets management, OWASP Top 10, vulnerability remediation, and software supply chain security.
• Experience with Docker, Kubernetes/OpenShift, container registries, and secure deployment practices.
• Experience working closely with development teams in enterprise or regulated environments.
• Strong ownership, communication, teamwork, and problem-solving skills.
• Professional fluency in English, both written and spoken.

Nice to Have

• Experience with SBOM implementation and software supply chain security initiatives.
• Cloud security knowledge across AWS, Azure, or GCP environments.
• Relevant certifications in DevSecOps, Application Security, Kubernetes, Cloud Security, or Security Engineering.

Location & Eligibility

• Candidates must be based in Portugal.
• Hybrid role in Oeiras (Taguspark).
• Weeks 1 and 2: 2 days per week onsite.
• Week 3: Fully remote.

About emagine

At emagine, we value diversity, inclusion, and equal opportunities. We believe that different perspectives drive innovation and create stronger teams, and we are committed to fostering an inclusive environment where everyone can thrive. We work with leading international clients on innovative and high-impact projects, offering opportunities to grow both professionally and personally. If you are interested in this opportunity, we encourage you to apply and become part of a dynamic and forward-thinking environment.

To learn more about us, visit our website: www.emagine-consulting.com