Descripción de la vacante
Full-time hours
Spain
Expert DevSecOps Engineer en España is listed on Jobeax. Browse 80,000+ vacancies available.
A healthier future drives us to innovate. Together, more than 100'000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let's build a healthier future, together.
Roche is an Equal Opportunity Employer.
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
As an Expert DevSecOps Engineer, acting as a Software Development Security Expert, you will sit at the intersection of software and security engineering. You are accountable for designing robust software development security frameworks, handling ambiguous security and compliance requirements, managing complex stakeholder landscapes, and mentoring junior engineers. You will also collaborate with the area architect in defining the long-term architecture for software engineering security solutions.
Engineering Excellence & Experience (E3) enables engineers to explore, plan, design, code, build, test, and deploy software packages in a reliable, secure, automated, and consistent manner across our different business areas. This includes providing facilitated access to automated, composable infrastructure consumable through Infrastructure as Code (IaC) and APIs, both on-premises and in the public cloud.
Within E3, you will join the Embedded Security & Testing Team, which champions the integration of testing and security concepts throughout the software development lifecycle. Specifically, the Code Quality, Security, and Testing Engineering team combines best practices and modern solutions to ensure that all code generated is secure and of the highest quality. The team provides a range of DevSecOps components fit for diverse technical complexities, delivers Proofs of Concept (PoCs), and supports internal adoption both during and after implementation.
Provides expert-level leadership and strategic guidance in DevSecOps area, including Threat Modelling, Code Quality, SAST, Secret Scanning, Software Composition Analysis, IaC Scanning, License Compliance, Dependency Management, Container Image Scanning, API Security and Container Runtime Scanner.
Participate in the definition of Software Security best practices, ensuring consistency, traceability, and alignment with enterprise standards
Leads DevSecOps efforts on strategic activities and provides guidance to less experienced members.
Leads the analysis of complex and strategic business problems, defining the problem space and driving comprehensive root cause analysis that may span organizational boundaries
Works on unusually complex problems, provides highly innovative solutions, and applies expert-level analytical and logical reasoning to proactively identify strategic opportunities and risks
Builds and maintains strong relationships with key stakeholders and cultivates collaboration across the organization
Elicits and analyzes complex stakeholder needs with expertise, and influences business stakeholders to inform and make the right decisions
Shapes strategy as a trusted advisor to leadership, acting as an influential partner and organizational trust builder
Recommends and guides the implementation of optimal strategies, transitions, and future states, fostering a culture of strategic innovation and continuous improvement within their product line or domain
Evaluates strategic solution alternatives through rigorous risk assessment and value analysis, ensuring key initiatives align with overall organizational objectives, and recommends optimal technology solutions to drive business transformation.
Is accountable for deliverables on significant projects, ensuring alignment with strategic objectives, defining strategic solution scope, and managing complexity
Mentors colleagues, helps others develop expertise and skills, and provides guidance to other Experts
Actively contributes to organizational development, including showing leadership in Communities of Practice (CoPs).
Understands and balances strict security compliances without slowing down developers.
Education: Bachelor's or Master's degree in Computer Science, Software Engineering, or a related technical field (or equivalent practical experience).
DevSecOps Expertise: Minimum of 8-10+ years of progressive experience, including 3+ years of specialization in building DevSecOps frameworks from scratch.
Be a hands-on tools agnostic technical expert on the DevSecOps Enablement tools to support Product and Application teams in deploying and using DevSecOps Enablement tooling across SDLC, including but not limited to: SonarQube, GHAS, Sysdig, Snyk, IriusRisk, JFrog Xray, NowSecure, etc.
Design and implement automated security testing guardrails (SAST, SCA, Container scanning, etc.) directly into DevOps workflows to enable frictionless, secure software delivery.
Experienced in self-service DevOps platforms to automate security via templates for product team
Solid understanding of supply chain security to secure software packages, libraries, container images, etc. via security tools, processes and automations.
Navigating Ambiguity: Proven ability to manage business analysis activities on complex projects where requirements are highly fluid or loosely defined.
Strategic Influencing: Exceptional communication skills with a track record of driving consensus among cross-functional stakeholders (Product Owners, Developers, and Business Leads).
Systems Thinking: Ability to manage interdependencies, handling the interconnections between various internal and external processes to improve overall delivery efficiency.
Vacantes similares
Roche is seeking an Expert DevSecOps Engineer to bridge software and security engineering, designing robust security frameworks and guiding complex stakeholder landscapes. You will mentor junior engineers and collaborate with an area architect to define long-term security-oriented software architecture. The role sits within ...
Spain, Madrid
€55,000 - €80,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. This is a Full-time, on-site position where you will be responsible for implementing and maintaining secure CI/CD pipelines, managing cloud infrastructure security, and ensuring compliance ...
Spain, Madrid
€55,000 - €80,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our dynamic security and infrastructure team in Spain. This is a Full-time, on-site position where you will be responsible for designing, implementing, and maintaining secure CI/CD pipelines and infrastructure. You will work closely with development ...
Spain, Madrid
Full-time hours
... services—creating tangible value at speed and scale. Are you motivated to transform security from the heart of development and deployment? Join us and lead DevSecOps engineering on projects that make a difference. What you'll do - Collaborate closely with architects, developers, operations, and functional owners to expand ...
Spain
€65,000 - €95,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. In this Full-time, on-site position, you will be responsible for designing, implementing, and maintaining secure CI/CD pipelines while ensuring compliance with industry standards. You will ...
Spain, Madrid
€55,000 - €75,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. This is a Full-time, on-site position where you will play a crucial role in integrating security practices throughout our development and operations pipelines. You will work on designing, ...
Spain, Madrid
€55,000 - €78,000 a year
About the role We are seeking an experienced DevSecOps Engineer to join our growing security and infrastructure team in Spain. This is a Full-time, on-site position where you will be responsible for integrating security practices into our development and operations workflows. You will work on building secure CI/CD pipelines, ...
Spain, Madrid
€55,000 - €80,000 a year
About the role We are seeking an experienced DevSecOps Engineer to join our growing team in Spain. This is a Full-time, on-site position where you will be responsible for integrating security practices into our DevOps pipeline. You will work on automating security checks, managing infrastructure as code, and ensuring compliance ...
Spain, Madrid
€60,000 - €85,000 a year
... shape our security posture and drive innovation in infrastructure automation and threat prevention. Who are we looking for We're looking for an experienced DevSecOps professional with a strong background in both development and security. You should have: - Proven experience in DevSecOps or Security Engineering roles (5+ ...
Spain, Madrid
€65,000 - €95,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our innovative security team in Spain. This is a Full-time, on-site position where you will play a crucial role in integrating security practices into our development and operations workflows. You will work with cutting-edge technologies and ...
Spain, Barcelona
€55,000 - €80,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our dynamic team in Spain. This is a Full-time, on-site position where you'll play a crucial role in integrating security practices throughout our development lifecycle. You'll work with cutting-edge technologies and collaborate with cross-functional ...
Spain, Barcelona
€55,000 - €75,000 a year
About the role Buscamos un DevSecOps Engineer experimentado para unirse a nuestro equipo de infraestructura y seguridad. En esta posición, serás responsable de integrar prácticas de seguridad en nuestro pipeline de desarrollo, asegurando que todas nuestras aplicaciones cumplan con los estándares de seguridad más rigurosos. ...
Spain, Madrid
€55,000 - €80,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. In this Full-time, on-site position, you will be responsible for designing, implementing, and maintaining secure CI/CD pipelines while ensuring compliance with industry standards. You'll ...
Spain, Madrid
€55,000 - €75,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. In this Full-time, on-site position, you will be responsible for designing, implementing, and maintaining secure DevOps practices across our cloud infrastructure and CI/CD pipelines. You'll ...
Spain, Madrid
€55,000 - €78,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing engineering team in Spain. In this Full-time, on-site position, you will be responsible for designing, implementing, and maintaining secure CI/CD pipelines while ensuring infrastructure security at every stage of the development lifecycle. ...
Spain, Madrid
€65,000 - €95,000 a year
About the role We are seeking an experienced Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. This is a Full-time, on-site position where you will play a crucial role in integrating security practices into our DevOps pipeline. You will be responsible for designing, implementing, and ...
Spain, Barcelona
€55,000 - €80,000 a year
About the role We are seeking a talented Senior DevSecOps Engineer to join our growing security and infrastructure team in Spain. As a DevSecOps Engineer, you will be responsible for integrating security practices throughout our development and operations pipelines. You'll work on automating security checks, implementing ...
Spain, Madrid
€55,000 - €75,000 a year
About the role Buscamos un DevSecOps Engineer experimentado para unirse a nuestro equipo de ingeniería en Madrid. En esta posición, serás responsable de diseñar, implementar y mantener infraestructuras seguras y escalables. Trabajarás en la integración de prácticas de seguridad en todo el ciclo de vida del desarrollo de ...
Spain, Madrid
Omega CRM Consulting is seeking a CISOC Application Security Engineer to collaborate with a leading pharmaceutical client. The role focuses on implementing and managing Static Application Security Testing (SAST) within the organization, leveraging a strong software development and security background. Responsibilities include ...
Spain, Sant Cugat