DevSecOps / Secure SDLC Consultant

We're a global IT consulting company and a software development service provider that helps organizations operate at their best. With 30+ years of experience, +6 Global locations, and +1000 employees, TEAM combines technology expertise, valuable insights, business intelligence, and a client-centered approach to address challenges in business operations, digital transformation, risk management, compliance, business continuity, and more.

To support a strategic program for the implementation of regulatory requirements (DORA), we are looking for an experienced DevSecOps / Secure SDLC Consultant with a strong operational focus.

In this role, you will support the project management in the technical and procedural implementation of a secure, auditable software development process.

Your Responsibilities

• Operationalization of a DORA-compliant Secure Software Development Lifecycle (SDLC)

• Integration of security requirements into existing development and CI/CD processes

• Implementation and Configuration of:

o SAST Tools

o DAST Tools

o Software Composition Analysis (SCA)

o SBOM Generation

• Integration of the security tools into existing CI/CD pipelines

• Definition of security gates and automated checking mechanisms

• Development and maintenance of a modular Jenkins shared library for the provision of reusable pipeline modules for multiple repositories (including security gates, tool integrations and compliance checks)

• Conducting risk assessments and supporting threat modeling

• Creation of technical guidelines (e.g. for third-party components and libraries)

• Ensuring auditable documentation in accordance with regulatory requirements

• Support in establishing governance structures for secure development

• Working closely with DevSecOps architects, developers, product owners and key stakeholders

Your Profile

• Several years of experience in DevSecOps, Application Security or Secure SDLC

• Solid experience in integrating security tools into CI/CD environments

• Very good knowledge of Jenkins, especially in the development and maintenance of Groovy-based shared libraries for defining and enforcing security gates

• Practical experience in the use of CLI-based security tools as well as the integration and configuration of associated Jenkins plugins (e.g., for SAST, SCA, SBOM, policy checks)

• Good knowledge of common CI/CD platforms (e.g., GitLabs & GitHub)

• Knowledge of regulatory requirements (DORA desirable)

• Very good knowledge of German and English

Personal skills

• Structured and independent way of working

• High technical implementation strength

• Ability to integrate safety requirements pragmatically into development processes

• Strong communication skills in exchange with technical and non-technical stakeholders

• Solution-oriented and hands-on mentality

Being a part of TEAM International gives you the chance to work on challenging projects with great professionals, international clients, and the latest technologies.

• Flexible engagement models and work alongside top IT global talent.
• Full compliance with security and regulatory standards.
• Customized IT and software development solutions.
• A supportive and collaborative work environment.
• 23 PTO days per year and your home country’s public holidays
• Sport allowance up to 40 EUR per month (based on receipt)
• Private Health Insurance compensation up to 1000 EUR annually (based on receipt)