Capco

3 weeks ago

Senior DevSecOps Engineer (AWS & Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Build and secure CI/CD pipelines that automate compliance guardrails across a multi-cloud engineering lifecycle. Integrate SAST/DAST, secret detection, vulnerability management, and software supply chain security into GitHub Actions, Azure DevOps, and GitLab CI. Deploy security tooling via EDR agents and scanning workflows, route logs and telemetry to SIEM, and enable developers with secure-by-default Terraform modules and Helm charts.

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract

Job Function: DevOps, Cloud & Infrastructure

Seniority: Mid level

Key Responsibilities

•Design, build, and maintain secure deployment pipelines and integrate vulnerability scanning, secret detection, and software supply chain security into developer workflows.
•Create policy-as-code guardrails using IaC linting/scanning tools (e.g., Checkov, Tfsec, OPA/Rego) to prevent misconfigurations before production.
•Automate deployment of security products such as EDR agents, vulnerability scanners, and monitoring tools into base images and containerized environments.
•Operationalize vulnerability remediation by ingesting findings from cloud security tools, prioritizing by risk, and routing items to engineering backlogs (e.g., Jira).
•Configure automated delivery of application, container, and infrastructure logs to central repositories and SIEM systems for real-time threat hunting.

Key Requirements

•Hands-on experience designing and securing automated CI/CD build and release pipelines at scale.
•Configure and manage native security services and access controls in both AWS and Azure.
•Advanced Infrastructure as Code (IaC) experience using Terraform and/or cloud-native tooling such as Bicep or CloudFormation.
•Implement and maintain security tools across the lifecycle (e.g., SonarQube, Prisma Cloud, Wiz, Snyk, CrowdStrike, or Sentinel).
•Strong Kubernetes security knowledge, including EKS/AKS best practices, service meshes, and container runtime defense.

Skills:CollaborationCommunicationProblem-solving

Certifications:Certified DevSecOps Professional (CDP)Practical DevSecOps certificationAWS Certified Security – SpecialtyAzure Security Engineer AssociateCertified Kubernetes Administrator (CKA)Certified Kubernetes Security Specialist (CKS)

Languages:English

Tech Stack:AWSAzureDevSecOpsCI/CDGitHub ActionsAzure DevOpsGitLab CISASTDASTEDRVulnerability ManagementSoftware supply chain securitySCASecret detectionTerraformBicepCloudFormationCheckovTfsecOPA

Company Brief

Capco

Global management and technology consultancy specializing in financial services. Capco advises banks, insurers, and capital markets firms on digital transformation, risk and compliance, technology implementation, and operational improvement, combining industry expertise with advisory and engineering capabilities.

Industry: Management Consulting

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: London, United Kingdom

Founded: 1998

Glassdoor: 3.7

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Capco

3 weeks ago

Senior DevSecOps Engineer (AWS & Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract

Job Function: DevOps, Cloud & Infrastructure

Seniority: Mid level

Key Responsibilities

•Design, build, and maintain secure deployment pipelines and integrate vulnerability scanning, secret detection, and software supply chain security into developer workflows.
•Create policy-as-code guardrails using IaC linting/scanning tools (e.g., Checkov, Tfsec, OPA/Rego) to prevent misconfigurations before production.
•Automate deployment of security products such as EDR agents, vulnerability scanners, and monitoring tools into base images and containerized environments.
•Operationalize vulnerability remediation by ingesting findings from cloud security tools, prioritizing by risk, and routing items to engineering backlogs (e.g., Jira).
•Configure automated delivery of application, container, and infrastructure logs to central repositories and SIEM systems for real-time threat hunting.

Key Requirements

•Hands-on experience designing and securing automated CI/CD build and release pipelines at scale.
•Configure and manage native security services and access controls in both AWS and Azure.
•Advanced Infrastructure as Code (IaC) experience using Terraform and/or cloud-native tooling such as Bicep or CloudFormation.
•Implement and maintain security tools across the lifecycle (e.g., SonarQube, Prisma Cloud, Wiz, Snyk, CrowdStrike, or Sentinel).
•Strong Kubernetes security knowledge, including EKS/AKS best practices, service meshes, and container runtime defense.

Skills:CollaborationCommunicationProblem-solving

Languages:English

Tech Stack:AWSAzureDevSecOpsCI/CDGitHub ActionsAzure DevOpsGitLab CISASTDASTEDRVulnerability ManagementSoftware supply chain securitySCASecret detectionTerraformBicepCloudFormationCheckovTfsecOPA

Company Brief

Capco

Industry: Management Consulting

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: London, United Kingdom

Founded: 1998

Glassdoor: 3.7

Website LinkedIn