{"id":2007000,"url":"https://alion.io/job/ewolve-expert-gitlab-cicd-appsec","title":"EXPERT GITLAB CI/CD & APPSEC","company":{"id":3908497,"name":"Ewolve","domain":"ewolve.fr","url":"https://alion.io/company/ewolve-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"freelance","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40000,"max":45000,"currency":"EUR","period":"year","gross":null,"usd_annual":50637},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SBOM","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-10-06T07:49:12Z","employer_posted_date":null,"last_verified_at":"2026-10-06T07:49:12Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"MissionPour le compte d’un grand compte du secteur bancaire, nous recherchons un consultant expert en GitLab CI/CD et sécurité applicative afin d’accompagner la mise en place d’une nouvelle plateforme d’Intégration Continue et l’industrialisation des contrôles de sécurité.\nAu sein de l’équipe en charge de la sécurité applicative, vous interviendrez dans le cadre d’un programme transverse de modernisation de l’usine logicielle, avec notamment la migration de nombreux projets Jenkins / Bitbucket vers GitLab.\nL’objectif sera d’intégrer et d’automatiser les contrôles de sécurité au sein des chaînes CI/CD, sous forme de templates réutilisables et industrialisés à l’échelle du Groupe.\nVos principales missionsConcevoir et industrialiser des templates GitLab CI/CD dédiés à la sécurité applicative.\n\nIntégrer les contrôles SAST, DAST, SCA et détection de secrets dans les pipelines CI/CD.\n\nMettre en œuvre les principes de Security by Design / Shift Left.\n\nAutomatiser la gestion et la traçabilité des résultats de sécurité.\n\nParticiper à la gestion des SBOM, à la sécurisation de la supply chain et aux processus de sécurité associés.\n\nAssurer l’intégration avec les outils de déploiement et d’orchestration.\n\nAccompagner les équipes de développement dans l'adoption des templates et des pratiques de développement sécurisé.\n\nParticiper à la gestion des faux positifs et à la remédiation des vulnérabilités.\n\nRédiger la documentation technique, les guides d’intégration et les bonnes pratiques.\n\nSuperviser et optimiser les pipelines de sécurité afin de garantir leur performance et d’éviter les blocages injustifiés des chaînes de build.\n\nProfil recherché\nProfil recherchéDe formation supérieure en informatique, vous disposez d’une expérience significative en DevSecOps, CI/CD et sécurité applicative.\nVous êtes particulièrement à l’aise dans les environnements de grande entreprise et avez déjà travaillé sur l’industrialisation de chaînes CI/CD et de contrôles de sécurité à grande échelle.\nVous êtes capable d’interagir aussi bien avec des équipes de sécurité qu’avec des équipes DevOps et développement.\nUne bonne capacité de vulgarisation, de communication et d’accompagnement des équipes est attendue.\nCompétences attenduesIndispensables :\nGitLab CI/CD – Expert\n\nSécurité applicative / AST – Expert\n\nÉcosystème DevOps & SDLC – Expert\n\nAnglais professionnel\n\nImportantes :\nSecurity-as-Code – Confirmé\n\nSAST / SCA / DAST\n\nCheckmarx, Qualys WAS ou solutions équivalentes\n\nJenkins / Bitbucket\n\nXL Deploy / XL Release\n\nAPIs / CLI pour l’intégration d’outils de sécurité dans les pipelines\n\nGestion des SBOM et sécurisation de la supply chain\n\nDocumentation et accompagnement des équipes de développement","description_format":"text","description_chars":2709,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-07T12:33:56Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":37,"reasons":["seen:5","velocity","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":50637,"is_top_pay":false},"html_url":"https://alion.io/job/ewolve-expert-gitlab-cicd-appsec","json_url":"https://alion.io/job/ewolve-expert-gitlab-cicd-appsec.json","meta":{"generated_at":"2026-10-13T05:47:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8930,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908497},"rest":"https://alion.io/mcp/rest/get_company?id=3908497"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fewolve-expert-gitlab-cicd-appsec"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fewolve-expert-gitlab-cicd-appsec"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fewolve-expert-gitlab-cicd-appsec"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ewolve-expert-gitlab-cicd-appsec\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fewolve-expert-gitlab-cicd-appsec"}]}