Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 39 hours agoWe saw it 57 min after it went up

Senior DevSecOps Engineer

JustMarkets124 open roles

Where
Europe
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior DevSecOps EngineerJustMarkets · Europe

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on JustMarkets's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market. JustMarkets postings stay open a median of 45 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted 39 hours ago

JustMarkets median: 45 days open

The posting

We are looking for a Senior DevSecOps Engineer to join our Product Security team and help strengthen security across our software development lifecycle.

In this role, you will design, implement, and maintain security integrations within CI/CD pipelines, automate security workflows, and improve the reliability and effectiveness of security controls.You will work closely with Application Security, Cloud Security, DevOps, Platform, and Engineering teams to ensure that security checks are integrated seamlessly into development workflows, vulnerabilities are identified and addressed efficiently, and developers receive clear, actionable feedback.

This is a hands-on technical role offering the opportunity to influence how security tooling and automation are implemented across our engineering environment.

Responsibilities

  • Integrate and maintain SAST, SCA and secrets scanning in CI/CD pipelines and developer workflows
  • Build reusable pipeline integrations and security rules managed as code, including agreed cloud configuration checks with Cloud Security and DevOps. Test changes, plan safe rollouts with pipeline owners and verify that required checks run across the agreed scope
  • Tune scanner rules and configurations to reduce false positives and give developers useful feedback. Validate changes with AppSec, record exclusions and avoid hiding real risks to keep pipelines green
  • Troubleshoot failed scans, broken integrations and security-related pipeline failures. Restore controls or escalate blockers promptly, explaining the impact and the action needed
  • Automate finding collection, duplicate handling, ticket creation and status updates. Ensure validated High pipeline and secrets findings have an owner, action and due date; follow up and escalate unresolved ownership or blockers
  • Work with AppSec and developers to validate findings, improve remediation guidance and check fixes where needed. Turn recurring problems into reusable checks and workflow improvements
  • Apply scanner configuration changes within the approved baseline. Recommend new gates, tool changes and exception-handling improvements for approval; escalate pipeline-breaking issues or critical unowned findings to Manager (DevSecOps & Application Security)
  • Maintain clear coverage records, troubleshooting guides and operational runbooks. Use pipeline and tool data to show missing checks, control failures and outstanding findings, and share knowledge so others can support the integrations

Requirements

  • At least 3+ years of hands-on experience in DevSecOps engineering roles
  • Strong understanding of Git workflows and CI/CD pipelines, with the ability to design reusable integrations, investigate failed jobs and assess the impact of changes on software delivery
  • Practical experience configuring static application security testing (SAST), software composition analysis (SCA) and secrets scanning, tuning rules, investigating false positives and routing results to the right teams
  • Ability to write, test and maintain automation in a suitable language, such as Python, Bash or Go, and integrate systems through APIs. A specific language is less important than reliable, maintainable integrations
  • Experience implementing security checks or policies as code, with version control, testing and controlled changes
  • Practical experience securing and hardening cloud environments with at least one major cloud provider (AWS preferred), including automated compliance checks against agreed security requirements
  • Working knowledge of Linux and container-based build environments, including permissions, credentials and logs needed to troubleshoot security tooling
  • Understanding of common application, dependency and exposed-secret risks; ability to distinguish a tool failure from a security finding and identify when specialist review is needed
  • Ability to maintain clear coverage records, operational runbooks and reporting using pipeline, scanner and work-item data
  • Strong problem-solving, communication, and collaboration skills, with the ability to take ownership of technical tasks and coordinate with cross-functional teams
  • English(В1), Russian (fluent)

Will be a plus

  • Direct experience with GitLab CI/CD security integrations
  • Experience with Terraform or Kubernetes security checks
  • Software supply-chain security, including software bills of materials (SBOMs), artifact signing or build provenance
  • Experience integrating dynamic application security testing (DAST), or using AI-assisted tools to improve security automation with appropriate review
  • Experience in fintech, trading, payments or other security-sensitive product environments

We offer

  • 20 paid vacation days per year
  • 10 paid sick leave days per year
  • Public holidays as per the company's approved Public holiday list
  • Medical budget
  • Opportunity to work remotely
  • Professional education budget
  • Language learning budget
  • Wellness budget (gym membership, sports gear and related expenses)
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against JustMarkets's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on JustMarkets's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    JustMarkets's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.