DevSecOps Engineer

Please note that for this role we can only hire EU-27 citizens or candidates with an existing Swiss working permit/citizenship.

SuisseCo specializes in the international recruitment and placement of highly qualified IT specialists in Switzerland. We support our clients in the implementation of their IT projects and guarantee quick and flexible solutions of the highest quality.

We are currently in search of a seasoned DevSecOps Engineer for our client.

• Start date: asap
• Duration: 6 months
• Workload: 100%
• Location: Zurich, 60% onsite - 40% remote

Tasks and Duties

• Implementing into projects security tools such as SAST, secret scanning, and security testing report generation
• Developing and maintaining CI/CD pipelines using tools like TeamCity, Jenkins, and Azure DevOps
• Generating and analyzing Software Bill of Materials (SBOM) and integrating with tools like Dependency Track and Defect Dojo
• Integrating security scanners like Semgrep and gitleaks
• Collaborating with development teams to provide vulnerability feedback and support them with analysis and resolution
• Utilizing containerization and orchestration tools like Docker and Kubernetes
• Writing scripts and automation using Bash, Python, and PowerShell

Essential Skills

• Experience with security tools such as SAST, secret scanning, and security testing
• Proficiency in CI/CD tools like TeamCity, Jenkins, and Azure DevOps.
• Knowledge of SBOM management and tools like Dependency Track and Defect Dojo.
• Familiarity with security testing tools like Semgrep and gitleaks.
• Experience with containerization and orchestration tools like Docker and Kubernetes.
• Strong scripting skills in Python, PowerShell and Bash
• Understanding of DevOps practices and tools
• Familiarity with Android and iOS build environments
• Knowledge of networking and problem-solving skills

Desired Skills

• Experience with Jira, GitHub, and Polarion for vulnerability feedback and tracking
• Familiarity with YAML, XML, and JSON
• Knowledge of HTML, CSS security
• Experience with embedded firmware security
• Experience with Confluence and other collaboration tools

If you're interested or would like more information, please apply or let me know. I'd be happy to discuss this opportunity with you further.