{"id":4197185,"url":"https://alion.io/job/axiomatics-devsecops-application-security-engineer","title":"DevSecOps / Application Security Engineer","company":{"id":99194,"name":"Axiomatics","domain":"axiomatics.com","url":"https://alion.io/company/axiomatics","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Greece"],"countries":["GR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Bitbucket","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Cosign","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"Gradle","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"Jira","optional":false},{"name":"KEV","optional":false},{"name":"Kubernetes","optional":false},{"name":"Maven","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Falco","optional":true},{"name":"Gitleaks","optional":true},{"name":"Keycloak","optional":true},{"name":"Kyverno","optional":true},{"name":"SLSA","optional":true},{"name":"TruffleHog","optional":true}],"status":"live","first_seen_at":"2026-11-12T20:53:14Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T20:53:14Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Do you want to shape the security posture of modern cloud-native platforms and protect critical data for global enterprises?\nAt Axiomatics, we develop Attribute-Based Access Control (ABAC) solutions that help banks, government agencies, and global enterprises protect critical data and control access to sensitive information. Here, you will work with cutting-edge technology and complex security challenges in an international environment.\nFounded in 2006, Axiomatics specializes in dynamic authorization and fine-grained access control, helping organizations make secure, context-aware decisions about who can access what, when, and under which conditions. As a subsidiary of Leonardo S.p.A. - a global company operating in Aerospace, Defense, and Cyber Security - we combine the agility and innovation of a technology company with the stability and resources of a major international group.\nWe are seeking an experienced DevSecOps / Application Security Engineerto join our Engineering team in Athens, Greece, and help strengthen security across our software delivery lifecycle, cloud infrastructure, and CI/CD pipelines.\nAbout the Role\nIn this hands-on role, you will act as the bridge between development and platform security, taking ownership of end-to-end vulnerability management, implementing automated security controls across our cloud-native infrastructure and CI/CD pipelines, and supporting compliance with demanding enterprise security standards.\nKey Responsibilities\nDesign, harden, and maintain CI/CD pipelines across GitHub Actions, Jenkins, and Bitbucket with automated security gates and break-the-build policies.\nImplement and manage SAST, SCA, and container security scanning (SonarQube, Snyk, JFrog Artifactory/Xray). \nLead end-to-end vulnerability triage and prioritization based on reachability, exploitability, and business risk using CVSS, EPSS, and CISA KEV. \nConduct DAST and API security assessments (OWASP ZAP, Burp Suite, Snyk API & Web) aligned with OWASP Top 10 and OWASP API Security Top 10. \nSecure AWS cloud infrastructure, Kubernetes clusters (EKS), and Helm charts using GitOps workflows via ArgoCD. \nAudit and enforce Infrastructure as Code (IaC) security using Terraform/CloudFormation and scanning tools (Checkov, Trivy). \nOversee supply-chain security, including SBOM management, image signing with Cosign, and CVE remediation. \nSupport compliance-driven engineering (ISO 27001, SOC 2, Cyber Resilience Act) by mapping technical evidence and participating in audits. \nConduct threat modeling (STRIDE/OWASP) and collaborate closely with engineering teams to promote secure coding practices.\nYour Profile\nTo succeed in this role, you are an experienced DevSecOps or Application Security Engineer who takes ownership of security outcomes from design through to remediation. You communicate security risks clearly to engineers, product colleagues, and stakeholders, building trust through expertise, professionalism, and reliability, and influencing technical teams without direct authority.\nQualifications & Experience\n5+ years of overall professional experience in DevOps, DevSecOps, or platform security engineering, including at least 3+ years with a dedicated focus on application security, CI/CD security, or DevSecOps practices. \nDeep hands-on experience with AWS (EKS, ECR, IAM, VPC, Secrets Manager) and Kubernetes in production. \nStrong scripting skills in Python and Bash, including workflow automation via REST APIs (Jira, Slack, Snyk, SonarQube). \nWorking knowledge of the Java build ecosystem (Maven, Gradle) and remediation of vulnerable transitive dependencies. \nHands-on experience with secrets management, SIEM logging, access reviews, and incident response. \nExcellent written and spoken English.\nNice to Have\nRelevant certifications: CKS, AWS Security Specialty, or OSCP. \nExperience with identity and authorization protocols: OAuth 2.0 / OIDC, Keycloak, ABAC, XACML. \nExperience with Policy-as-Code (OPA, Kyverno) and advanced supply-chain standards (SLSA provenance, VEX). \nExposure to cloud runtime security and posture management tools (GuardDuty, SecurityHub, Falco) or secrets detection (Gitleaks, TruffleHog). \nHands-on penetration testing skills.\nOur Values\nDeliver innovation- We are passionate about providing unique expertise and support. \nEasy to do business with- We strive to create positive experiences for partners and customers. \nCustomer focus- Our solutions are designed to simplify the customer’s everyday work while enhancing security. \nResults-driven- We continuously improve our products, processes, and relationships. \nEmpower others- We collaborate openly and respectfully with colleagues, customers, and partners.\nWhat Axiomatics Offers\nCutting-Edge Security Impact:Opportunity to work with advanced, policy-based authorization technology within a leading cybersecurity company. \nEMEA Enterprise Exposure:Exposure to some of the most security-sensitive and complex organizations across the EMEA region. \nFlexible Workstyle in Greece:Flexible hybrid working model with home office support. \nCompetitive Compensation & Health:Highly competitive compensation package and private health insurance. \nContinuous Professional Growth:Continuous learning opportunities, access to security certifications, and modern tooling.\nPractical Information\nPay Transparency:The applicable salary range will be communicated to candidates invited for an assessment interview, in accordance with applicable Greek and EU pay transparency requirements (Greek Law 5316/2026 & EU Directive 2023/970).\nApplication Process:Recruitment managed by Randstadon behalf of Axiomatics.\nPlease submit your updated CV via the \"Apply\" option. Only applications submitted through the Randstad online portal will be considered. Shortlisted candidates will be contacted for an interview and may be invited to complete a short video interview. All applications will be treated confidentially.\nQuestions?For any questions about this position, please contact Konstantinos Adamopoulosat Randstad by phone at 6940080281(Monday to Friday) or .","description_format":"text","description_chars":6106,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Greek","level":"All levels","optional":true},{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Flexible schedule","Health insurance","Home office","Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","Identity Management","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-12T20:53:14Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T23:10:32Z"},"pay":null,"html_url":"https://alion.io/job/axiomatics-devsecops-application-security-engineer","json_url":"https://alion.io/job/axiomatics-devsecops-application-security-engineer.json","meta":{"generated_at":"2026-11-12T23:10:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":49018,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":99194},"rest":"https://alion.io/mcp/rest/get_company?id=99194"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faxiomatics-devsecops-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faxiomatics-devsecops-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faxiomatics-devsecops-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/axiomatics-devsecops-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faxiomatics-devsecops-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4197185}},{"tool":"search_jobs","arguments":{"company":"axiomatics.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4197185},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}