DevSecOps Engineer CI/CD Security Implementation (Freelancer) at Jean Len GmbH

Cologne, North Rhine-Westphalia, Germany -

Full Time

Start Date

Immediate

Expiry Date

27 Jun, 26

Salary

0.0

Posted On

29 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Github Actions, Yaml, SonarQube, Snyk, Dependency Scanning, Container Scanning, Aws Ecr, Security Hub, Secrets Manager, Secret Scanning, Pre-commit Hooks, Python, R, Php, Dockerfile, Iso 27001

Industry

Personal Care Product Manufacturing

Description

Your tasks You will be writing YAML, configuring tools, and committing code: SAST – Static Application Security Testing - Integrate SonarQube into GitHub Actions for code quality and security scanning - Configure quality gates and security rules for Python, R, and PHP codebases - Set up branch analysis and PR decoration Dependency Scanning & SCA - Implement Snyk for dependency vulnerability scanning in CI pipelines - Configure Snyk for Python, R, and PHP projects - Set up automated fix PRs and vulnerability tracking - Integrate Snyk with GitHub for continuous monitoring Container Image Security - Configure AWS ECR Enhanced Scanning for container images - Set up ECR scan-on-push and findings routing to Security Hub - Create Dockerfile security best practices and base image guidelines Secret Scanning & Management - Configure GitHub secret scanning and push protection - Implement pre-commit hooks - Set up AWS Secrets Manager integration patterns for applications Security Gates & Pipeline Governance - Create security gates that block deployments on critical/high findings - Configure severity thresholds and exception workflows - Document all configurations for ISO 27001 audit evidence Your profile You must have hands-on implementation experience with: -GitHub Actions: writing and maintaining complex workflows - SonarQube: setup, configuration, quality gates, CI integrations - Snyk: dependency scanning, GitHub integration, fix automation - Container scanning: ECR scanning, or similar tools - AWS: ECR, Security Hub, Secrets Manager - Python: enough to understand and review Python code for security Nice to Have - DAST implementation (OWASP ZAP automation) - ISO 27001 compliance documentation experience - AWS GuardDuty and Inspector configuration - GitHub Advanced Security features - AWS Certified Security – Specialty Why us? We are an international and diverse team of passionate and experienced experts, joining forces for a sustainable future! We believe that our team is our core asset and we support our people as best we can. To help you build your future and thrive with us, we offer: Remote work and flexible working hours Competitive compensation Professional onboarding to help you have an ideal start with us Being part of a meaningful mission to a more sustainable future The opportunity to work independently Ready to join our team? We are looking forward to your application and hope to welcome you in our team soon! We are a company with equal opportunities for everyone and encourage applications from all suitably qualified candidates regardless of age, race, gender or any other criteria that is not a professional qualification for an open position.

Responsibilities

The role involves writing YAML, configuring tools, and committing code to integrate security practices across CI/CD pipelines, focusing on SAST, dependency scanning, and container image security.