devsecops engineer.

• Highly competitive compensation package.
• Private health insurance.
• Flexible hybrid working model with home office support.
• Continuous learning opportunities, access to security certifications, and modern tooling.
• Collaborative engineering culture focused on modern cloud-native standards.

In this role, you will embed security deeply across the software delivery lifecycle, modern cloudinfrastructure, and CI/CD pipelines. You will act as the bridge between development andplatform security, driving vulnerability management, establishing automated security gates, andensuring high-standard compliance across enterprise environments.

Key Responsibilities:

• Design, harden, and maintain CI/CD pipelines across GitHub Actions, Jenkins, and
• Bitbucket with automated security gates and break-the-build policies.
• Implement and manage SAST, SCA, and container security scanning (SonarQube, Snyk,JFrog Artifactory/Xray).
• Lead end-to-end vulnerability triage and prioritisation based on reachability, exploitability,and business risk using CVSS, EPSS, and CISA KEV.
• Conduct DAST and API security assessments (OWASP ZAP, Burp Suite, Snyk API &Web) aligned with OWASP Top 10 and OWASP API Security Top 10.
• Secure AWS cloud infrastructure, Kubernetes clusters (EKS), and Helm charts, usingGitOps workflows via ArgoCD.
• Audit and enforce Infrastructure as Code (IaC) security using Terraform/CloudFormationand scanning tools (Checkov, Trivy).
• Oversee supply-chain security, including SBOM management, image signing withCosign, and CVE remediation.
• Support compliance-driven engineering (ISO 27001, SOC 2, Cyber Resilience Act),mapping technical evidence and participating in audits.
• Conduct threat modelling (STRIDE/OWASP) and collaborate closely with engineering teams to promote secure coding practices.

In order for your profile to match this position, you need to have the following:

• 3+ years of professional experience in DevOps, DevSecOps, or platform securityengineering, dedicated focus on application security, CI/CD security, or DevSecOpspractices.
• Deep hands-on experience with AWS (EKS, ECR, IAM, VPC, Secrets Manager) andKubernetes in production.
• Strong scripting skills in Python and Bash, including workflow automation via REST APIs(Jira, Slack, Snyk, SonarQube).
• Working knowledge of the Java build ecosystem (Maven, Gradle) and remediation ofvulnerable transitive dependencies.
• Hands-on experience with secrets management, SIEM logging, access reviews, andincident response.
• Excellent written and spoken English, with strong communication skills and the ability toinfluence technical teams without direct authority.

Nice to Have:

• Relevant certifications: CKS, AWS Security Specialty, or OSCP.
• Experience with identity and authorization protocols: OAuth 2.0 / OIDC, Keycloak,ABAC, XACML.
• Experience with Policy-as-Code (OPA, Kyverno) and advanced supply-chain standards(SLSA provenance, VEX)
• Exposure to cloud runtime security and posture management tools (GuardDuty, SecurityHub, Falco) or secrets detection (Gitleaks, TruffleHog).
• Hands-on penetration testing skills.

3+ years as a DevSecOps Engineer

Got any questions regarding this position? You can contact Konstantinos Adamopoulos at 6940080281, from Monday to Friday. Otherwise, feel free to contact me at kadamopoulos@randstad.gr.

We look forward to receiving your application, uploading your updated CV by clicking the 'apply now' option.

In case that your application advances to the next stage, you may be automatically invited to submit a video, answering a few interview questions.

Please note that for transparency and equity reasons, only those applications made online via our site will be assessed. After the screening of all the CVs received, we will only contact the candidates who meet the requirements of the job to arrange an interview. ​All applications are considered strictly confidential.