{"id":3102923,"url":"https://alion.io/job/catamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java","title":"DevSecops (CI/CD, SAST/ DAST/ SCA/ API Rest/API Gateway/ Java)","company":{"id":183709,"name":"Catamania","domain":"catamania.com","url":"https://alion.io/company/catamania","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":57000,"max":72000,"currency":"EUR","period":"year","gross":null,"usd_annual":80760},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Apache Camel","optional":false},{"name":"Apache Kafka","optional":false},{"name":"API Gateway","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Java","optional":false},{"name":"Rest API","optional":false},{"name":"Spring Boot","optional":false}],"status":"live","first_seen_at":"2026-10-22T11:43:56Z","employer_posted_date":null,"last_verified_at":"2026-10-22T11:43:56Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Vos missions consisteront à concevoir:\nConcevoir, maintenir et industrialiser les chaînes CI/CD pour les APIs, événements, flux fichiers et composants Java, Spring Boot, Apache Camel et WebMethods\n\nAutomatiser les contrôles de qualité et de sécurité à chaque étape du cycle de développement : analyse statique du code, analyse des dépendances, détection de secrets, contrôle des images et tests de sécurité\n\nMettre en oeuvre les mécanismes de déploiement automatisé, de promotion inter-environnements, de gestion des configurations et des secrets, ainsi que les procédures de rollback\n\nContribuer à l’Infrastructure as Code et à la standardisation des environnements, en coordination avec les équipes Cloud, Infrastructure et Sécurité \n\nDéfinir et maintenir l’observabilité des services d’intégration : logs, métriques, traces, corrélation des flux, tableaux de bord et alertes\n\nAccompagner les équipes de développement dans l’application des standards DevSecOps, l’analyse des vulnérabilités et la remédiation\n\nDocumenter les pipelines, procédures d’exploitation, règles de sécurité et dossiers de mise en production.\n\nProfil recherché\nPour mener à bien ce projet, vous devrez justifier de:\nMaîtrise des pratiques CI/CD, Git et des stratégies de branching, versioning, packaging et promotion des artefacts ;\n\nExpérience des outils d’automatisation de pipelines et de qualité de code, ainsi que des principes de gestion d’artefacts ;\n\nMaîtrise des principes DevSecOps : SAST, DAST, SCA, gestion des secrets, contrôle des vulnérabilités et traçabilité des dérogations ;\n\nConnaissance des environnements conteneurisés, de l’orchestration, de l’Infrastructure as Code et des plateformes Cloud ;\n\nCompétences en observabilité et supervision, incluant logs centralisés, métriques, traces distribuées, tableaux de bord et alerting ;\n\nBonne compréhension des architectures d’intégration : APIs REST, API Gateway, Kafka/Confluent, Java, Spring Boot, Apache Camel et WebMethods ;\n\nConnaissance des mécanismes de sécurité applicative et des échanges : OAuth2, OIDC, JWT, HTTPS/mTLS, certificats et gestion des identités ;\n\nCapacité à intervenir dans un environnement Agile et à collaborer avec les développeurs, le Tech Lead, les équipes d’exploitation, d’infrastructure et de sécurité.\n\nExpérience démontrée dans l’industrialisation de plateformes d’intégration ou de systèmes distribués critiques ;\n\nExpérience en environnement réglementé ou soumis à des exigences fortes de sécurité, de traçabilité et de continuité de service.\n\nLes profils DevSecOps interviendront sous la gouvernance technique du Tech Lead et en coordination avec les équipes Sécurité, Cloud, Infrastructure et Exploitation. Ils devront privilégier l’automatisation, la reproductibilité, la traçabilité et la sécurité par défaut, sans se substituer aux responsabilités de validation et de gouvernance conservées.","description_format":"text","description_chars":2874,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-22T17:56:00Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.841,"p_room":0.9,"age_days":5,"expected_fill_days":13,"reasons":["seen:5","velocity","win:mid","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":80760,"is_top_pay":false},"html_url":"https://alion.io/job/catamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java","json_url":"https://alion.io/job/catamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java.json","meta":{"generated_at":"2026-10-28T08:25:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10904,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":183709},"rest":"https://alion.io/mcp/rest/get_company?id=183709"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcatamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcatamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcatamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/catamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcatamania-devsecops-cicd-sast-dast-sca-api-restapi-gateway-java"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3102923}},{"tool":"search_jobs","arguments":{"company":"catamania.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3102923},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}