Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 hours ago

DevSecOps Engineer

JustMarkets130 open roles

Where
Europe
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps EngineerJustMarkets · Europe

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on JustMarkets's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. JustMarkets postings stay open a median of 56 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 5 hours ago

JustMarkets median: 56 days open

The posting

The Product Security team is looking for a DevSecOps Engineer to strengthen security across the software development lifecycle. The role focuses on security tooling within CI/CD pipelines: making scanners effective and developer-friendly, automating routine workflows and ensuring that real risks are identified and remediated.

This is a hands-on position with a high level of autonomy and direct influence on how security checks are designed, rolled out and tuned across the engineering environment. The role involves close collaboration with AppSec, Cloud Security, DevOps, Platform and product engineering teams.

Responsibilities

  • Integration and maintenance of SAST, SCA and secrets scanning across CI/CD pipelines and developer workflows
  • Development of reusable pipeline integrations and security rules as code, including cloud configuration checks in collaboration with Cloud Security and DevOps
  • Safe rollout of changes together with pipeline owners and tracking of security coverage across pipelines
  • Tuning of scanner rules and configurations to reduce false positives and provide actionable feedback to developers, without masking real risks
  • Troubleshooting of failed scans and broken integrations, timely restoration of controls and escalation of blockers
  • Automation of the findings lifecycle: collection, deduplication, ticket creation and status tracking, ensuring every High finding has an owner and a due date
  • Collaboration with AppSec and development teams on finding validation, remediation guidance and conversion of recurring issues into automated checks
  • Proposals for new security gates, tools and improvements to exception handling
  • Maintenance of runbooks and coverage reports, as well as knowledge sharing across the team

Requirements

  • Proven experience in end-to-end ownership of security tooling in production CI/CD pipelines: design, rollout and ongoing maintenance of integrations
  • Strong knowledge of Git workflows and CI/CD pipelines, including design of reusable integrations, investigation of failed jobs and assessment of change impact on delivery
  • Practical experience configuring and tuning SAST, SCA and secrets scanning tools, as well as routing results to responsible teams
  • Solid automation skills in Python, Bash, Go or a similar language, including API integrations; reliability and maintainability are prioritized over a specific language
  • Experience implementing security checks or policies as code, with version control, testing and controlled rollouts
  • Hands-on experience securing and hardening environments across major cloud providers, including automated compliance checks
  • Working knowledge of Linux and containerized build environments: permissions, credentials, logs
  • Solid understanding of application, dependency and exposed-secret risks; ability to distinguish a tool failure from a security finding and identify cases requiring specialist review
  • Ability to work independently, take ownership of technical decisions and coordinate effectively with cross-functional teams
  • Upper-Intermediate English proficiency and higher
  • Fluent Ukrainian

Will be a plus

  • Experience with AWS GitLab CI/CD security integrations
  • Terraform or Kubernetes security checks
  • Software supply-chain security: SBOMs, artifact signing, build provenance
  • DAST integration or use of AI-assisted tools in security automation with appropriate review
  • Background in fintech, trading, payments or other security-sensitive product environments

We offer

  • 20 paid vacation days per year
  • 10 paid sick leave days per year
  • Public holidays as per the company's approved Public holiday list
  • Medical budget
  • Opportunity to work remotely
  • Professional education budget
  • Language learning budget
  • Wellness budget (gym membership, sports gear and related expenses)
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against JustMarkets's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on JustMarkets's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    JustMarkets's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.