Senior DevSecOps Engineer
Endava · Bucharest, Bucharest, ro ·
- Work mode
- Hybrid
- Seniority
- Senior
- Category
- Security
- Experience
- 5+ years
- Company size
- 1000+
Endava · Bucharest, Bucharest, ro ·
The Cyber Security Engineer is responsible for embedding security controls, testing, and monitoring into CI/CD pipelines, cloud infrastructure, and application development processes. The role combines expertise in cybersecurity, automation, and modern DevOps practices to identify vulnerabilities early, reduce risk, and ensure compliance without slowing down development.
Education & Certifications
Experience & Skills
Strong understanding of cloud security (AWS, Azure, GCP)
Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, CircleCI)
Familiarity with container and Kubernetes security
Knowledge of application security practices and secure coding principles
Automation and scripting skills (Python, Bash, Go)
Understanding of infrastructure-as-code tools (Terraform, CloudFormation)
Experience with monitoring and observability tools (Prometheus, Datadog, SIEM platforms)
Responsibilities
Integrate security into CI/CD pipelines by implementing automated security testing such as SAST, DAST, dependency scanning, and container image scanning.
Secure cloud infrastructure and platforms using Infrastructure-as-Code (IaC) practices and automated configuration checks.
Collaborate with development and operations teams to design secure architectures and implement security best practices throughout the software lifecycle.
Develop and maintain security tooling and automation, including scripts and integrations that enforce security policies during build and deployment.
Monitor systems and applications for threats, leveraging security monitoring platforms, SIEM tools, and cloud-native security services.
Perform vulnerability assessments and remediation coordination across infrastructure, applications, and containers.
Ensure compliance with security standards and policies, and help implement governance controls in automated workflows.
Respond to and investigate security incidents, supporting incident response and root cause analysis.
Discover some of the global benefits that empower our people to become the best version of themselves:
At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.