Assignment Description

We are looking for an experienced Senior DevSecOps Engineer

What You Will Work On

• Design, develop, and maintain security automation, scripts, templates, and internal platform tools.
• Build and enhance secure CI/CD pipelines with a security-first approach.
• Implement and maintain DevSecOps capabilities including SAST, DAST, secrets management, container security, and vulnerability management.
• Integrate security controls and compliance validation into development workflows and platform services.
• Support Infrastructure as Code (IaC) initiatives and cloud security implementations.
• Collaborate with development teams to improve secure software delivery and engineering practices.
• Develop technical standards, documentation, implementation guides, and operational runbooks.
• Continuously improve AppSec platform tooling, automation, and engineering processes.
• Facilitate Scrum ceremonies including sprint planning, daily stand-ups, sprint reviews, and retrospectives.
• Support PI Planning and agile delivery across the AppSec Platform team.
• Remove delivery blockers and improve team collaboration and workflow efficiency.
• Coach teams on Scrum principles, agile methodologies, and continuous improvement practices.
• Collaborate with stakeholders and leadership to align priorities, delivery expectations, and roadmap planning.
• Foster a collaborative, transparent, and psychologically safe team environment.
• Contribute to future platform strategy, product ownership, and technical leadership initiatives within the AppSec domain.

What You Bring

• Minimum 5 years of experience in DevSecOps, Platform Engineering, Cloud Engineering, or Application Security.
• Strong experience building and maintaining secure CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar platforms.
• Experience developing automation using Python, Bash, PowerShell, or similar scripting languages.
• Solid understanding of Secure Software Development Lifecycle (SSDLC/SDLC).
• Hands-on experience with OWASP security principles, SAST, DAST, vulnerability management, secrets management, and container security.
• Experience working with cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
• Knowledge of Infrastructure as Code (IaC) and cloud automation practices.
• Experience integrating security into software development workflows.
• Experience working as a Scrum Master, Agile Coach, or Agile Team Facilitator.
• Strong knowledge of Scrum methodology and Agile software delivery.
• Experience facilitating agile ceremonies and supporting cross-functional development teams.
• Ability to coach teams and stakeholders in agile principles and continuous improvement.
• Experience using Agile collaboration tools such as Azure DevOps, Jira, Mural, or similar.
• Strong communication, collaboration, stakeholder management, and problem-solving skills.
• Experience with platform engineering or internal developer platforms is an advantage.
• Knowledge of security tooling, compliance automation, and governance practices is preferred.
• Familiarity with Kubernetes, containers, and cloud-native technologies is considered beneficial.
• Experience working in large enterprise environments is an advantage.
• Scrum Master certifications such as CSM, PSM, or equivalent are highly desirable.
• Interest in evolving toward technical leadership, platform ownership, or Digital Product Owner responsibilities is considered a plus.

If this sounds interesting please send your CV at cv@veritaz.se