Lead DevSecOps Engineer | Ukraine

We are looking for an experienced Lead DevSecOps Engineer who combines strong hands-on technical expertise with the ability to lead a team and deliver security solutions for international clients.

As a Lead DevSecOps Engineer, you will combine hands-on consulting work with technical team leadership.

Approximately 70-80% of your time will be dedicated to delivering DevSecOps solutions for international clients, primarily German companies. The remaining 20-30% will focus on leading and developing the DevSecOps team.

About the team:
You will join a DevSecOps team delivering security consulting services to international clients, primarily companies based in Germany. The team focuses on integrating security into software development and delivery processes, strengthening cloud and infrastructure security, and helping clients adopt secure, scalable DevSecOps practices. Working closely with client engineering and security teams, as well as Deloitte Germany colleagues, the team supports organizations in improving their security maturity through practical solutions, automation, and continuous improvement. As a Lead DevSecOps Engineer, you will play an important role in both technical delivery and team development, combining hands-on engineering with mentoring, coordination, and technical leadership.

What we offer:

• Opportunity to work on international DevSecOps projects, primarily with German clients.A combination of hands-on technical work and team leadership responsibilities.Opportunities to work with modern cloud security, DevSecOps, and AI-assisted security technologies.Collaboration with international teams, including Deloitte Germany colleagues.Opportunities to contribute to technical decision-making, security improvements, and the development of the DevSecOps team.

Zakres obowiązków

• Client project delivery (70-80%):
• Assess clients' DevSecOps maturity and develop practical security improvement roadmaps.
• Integrate security practices into CI/CD pipelines and software development workflows.
• Design and implement secure cloud and infrastructure solutions, helping clients establish security standards and best practices.
• Select, integrate, and optimize security scanning tools for source code, dependencies, containers, and infrastructure.
• Advise clients on securing cloud environments, Kubernetes platforms, and supporting services.
• Conduct technical workshops and knowledge-sharing sessions with client teams.
• Analyze vulnerabilities, misconfigurations, and findings from security scans, penetration tests, and audits, supporting their remediation.
• Help clients adopt AI-assisted security solutions, evaluate their effectiveness, and establish appropriate security controls.
• Prepare technical documentation, security assessment reports, architecture recommendations, and other client deliverables.
• Collaborate with development, DevOps, and security teams, as well as Deloitte Germany colleagues, to improve security maturity.
• Optimize deployment and operational processes with a focus on security, automation, and reliability.
• Team leadership (20-30%):
• Lead and mentor DevSecOps engineers, supporting their technical and professional development.
• Plan and coordinate team activities across client engagements.
• Review technical solutions, provide constructive feedback, and support technical decision-making.
• Participate in recruitment and team development activities.
• Support presales activities, including project scoping, effort estimation, and technical contributions to proposals.
• Communicate project progress, key risks, and outcomes to client stakeholders and engagement leadership.

Wymagania

• 5+ years of hands-on commercial experience in DevSecOps, Cloud Security, or a related field.
• Strong expertise in DevSecOps and application security, including secure SDLC, vulnerability management, threat modeling, secrets management, IAM, and encryption.
• Extensive experience implementing and managing security tools within CI/CD pipelines, including SAST, DAST, SCA, SBOM, container and IaC scanning, with a focus on scalability and reducing false positives.
• Proven ability to design, implement, and maintain secure CI/CD pipelines using GitLab CI, GitHub Actions, Azure DevOps, Jenkins, or similar platforms, including reusable templates and secure-by-default practices.
• Solid experience with at least one major cloud platform (Azure, AWS, or GCP) and its security services.
• Hands-on experience with Docker, Kubernetes, and container security.
• Practical experience with Infrastructure as Code and configuration management tools such as Terraform, Ansible, and Helm.
• Strong scripting and programming skills in Python and Bash.
• Understanding of secure architecture principles and security best practices across cloud and on-premises environments.
• Experience defining and monitoring security metrics, including scan coverage, remediation timelines, and SLA compliance.
• Ability to translate technical security risks into clear business recommendations.
• Strong communication and stakeholder management skills, including leading workshops, presenting to senior stakeholders, and independently managing client-facing workstreams.
• Fluent English.

• 1+ year of experience as a Team Lead or Tech Lead, including task allocation, technical reviews, and mentoring engineers.
• Previous consulting experience, ideally working with German or DACH-region clients.
• Familiarity with EU cybersecurity regulations and standards, such as NIS2, DORA, the Cyber Resilience Act, and BSI C5.
• Experience designing and implementing security controls for modern GenAI architectures.
• Hands-on experience integrating AI into DevSecOps processes, including AI-assisted vulnerability triage, secure code reviews, automated remediation, threat modeling, and security workflows.
• Experience measuring the effectiveness of AI-driven security solutions, including accuracy, false-positive rates, and remediation time.
• Experience establishing secure practices for AI coding assistants such as GitHub Copilot, Cursor, or Claude Code, including data protection, security guardrails, MCP integrations, and AI-generated code controls.
• Relevant DevSecOps or Cloud Security certifications.
• Experience selecting and implementing ASPM, CNAPP, CWPP, or CSPM solutions.

Tech stack

• Security
• Cloud security
• SDLC
• IAM
• CI/CD Pipelines
• SAST
• DAST
• IaC
• GitLab CI
• GitHub Actions
• Azure DevOps
• Jenkins
• Cloud platform
• Azure
• AWS
• GCP
• Docker
• Kubernetes
• Infrastructure as Code
• Terraform
• Ansible
• Helm
• Python
• Bash
• Cloud
• SLA
• Stakeholder management
• Cybersecurity
• AI
• GitHub
• Claude