Senior DevSecOps Engineer

Job Description

We are seeking a Senior DevSecOps Engineer to join a Security Center of Excellence supporting a Global PC and Smart Devices Business. This is an exciting role where you will work with a global team of development engineers and security professionals, collaborating with multiple business units and DevOps teams to implement, configure, and administer DevSecOps tools in CI/CD pipelines.

You will stay up to date with the latest DevSecOps technology and trends while making a big impact within one of the largest PC organizations in the world. The ideal candidate takes initiative, has excellent organizational skills, and thrives in a fast-paced environment with multiple partners and projects.

_This position offers hybrid setup with the flexibility to work from any location in Latvia, whether it's your home or our office in Riga._

• Implement, integrate, and maintain security tools in collaboration with your team and other business units
• Identify areas for improvement within CI/CD pipelines
• Research and recommend new tools, processes, and techniques
• Perform cybersecurity control and risk assessments of proposed and existing product and infrastructure architecture for compliance with internal requirements and international cloud security best practices
• Recommend technical, administrative, and physical remediations and mitigations for identified risks and vulnerabilities
• Leverage industry best practices and specialized expertise in application security to enhance internal security guidelines
• Ensure security guidelines are aligned with current industry standards and effectively address emerging threats
• Oversee the end-to-end design review process, utilizing findings from various security review quality gates
• Collaborate closely with other BUs' DevOps teams to assist in implementing and maintaining security tools and processes

Requirements

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field
• Strong hands-on cybersecurity experience
• 3+ years of DevSecOps or Developer experience
• Knowledge of public cloud providers, especially AWS
• Background in implementing and maintaining DevSecOps tools
• Understanding of secure software development lifecycle (SDLC), threat modeling, and risk assessment
• Proficiency in security testing tools and methodologies (e.g., SAST, DAST, SCA)
• Familiarity with modern development frameworks and application security
• Strong written and verbal communication and interpersonal skills
• Capability to work independently as well as function as an integral part of a team, taking initiative and ownership in a fast-paced environment
• Flexibility to work across regions and functions to solve problems and get things done
• Fluency in English (C1 level)

Nice to have

• Expertise in Black Duck Coverity, Checkmarx ZAP, and/or Fuzz Testing
• Skills in JFrog Artifactory, Jenkins, and Snyk
• Competency in Wiz CSPM

Company offers

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.
• Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.