{"id":2072936,"url":"https://alion.io/job/twoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security","title":"Senior DevSecOps Engineer – Kubernetes & Software Supply Chain Security","company":{"id":617070,"name":"Twoday Oy","domain":"beanbakers.fi","url":"https://alion.io/company/beanbakers","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"B","score":75,"open_postings":10,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Copenhagen, Denmark"],"countries":["DK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":203000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":6933},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"External Secrets","optional":false},{"name":"Falco","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"PowerShell","optional":false},{"name":"Proxmox VE","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"Terraform","optional":false},{"name":"Wazuh","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2026-10-08T06:06:58Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-15T18:32:37Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Twoday is the leading digital transformation partner in Northern Europe with a global presence. With approximately 3,000 technologies, we collaborate with the most admired private and public organizations to deliver cutting-edge digital solutions. Our deep industry expertise spans Data & AI, software development, digital experiences, and business applications. Operating across the Nordics and Lithuania, our team generated a revenue of 280 million euros in 2023. We serve over 8,000 customers, supporting their digital transformation journeys.\nSenior DevSecOps Engineer - Kubernetes & Software Supply Chain Security\nPermanent position at Twoday | Copenhagen\nTwoday is a leading digital transformation partner in Northern Europe, with approximately 3,000 specialists delivering digital solutions to public and private organisations.\nWe are looking for an experienced, hands-on DevSecOps Engineer to strengthen security across development pipelines, Kubernetes platforms and production environments for one of our major public-sector clients.\nThis is a role for someone who implements, automates and maintains security controls - not someone who only advises on them.\nYour role\nYou will work alongside an experienced operations team, embedding security into development, deployment and daily operations while helping the team adopt secure, sustainable engineering practices.\nYour responsibilities will include:\nImplementing automated security controls across CI/CD pipelines, including SAST, SCA, secret scanning, container scanning and Infrastructure as Code (IaC) scanning.\n\nSecuring the software supply chain through SBOM generation (CycloneDX/SPDX), artefact signing and verification (e.g. Sigstore/cosign), SLSA principles and secure branch, review and release processes.\n\nSecuring CI/CD pipelines and runners using least-privilege principles.\n\nImplementing Kubernetes security controls, including admission control, policy-as-code, Pod Security Standards, RBAC, network policies and secrets management.\n\nHardening Linux and Windows environments and managing vulnerabilities from identification through to remediation.\n\nSupporting runtime threat detection, security monitoring, incident response and forensic investigations.\n\nEstablishing security frameworks for AI-assisted development and autonomous AI agents, including controlled permissions, review gates, traceability and protection against prompt injection.\n\nDocumenting security controls for compliance and audit purposes, while sharing knowledge and transferring solutions to the internal team.\n\nWhat we're looking for\nYou have practical DevSecOps experience and can demonstrate that you have implemented security controls in real development and production environments.\nWe are particularly interested in experience with:\nSoftware supply chain security: SAST, SCA, secret scanning, SBOM, artefact signing and verification, container and IaC scanning.\n\nCI/CD and automation: GitLab CI, GitHub Actions or similar, secure pipelines and runners, Terraform, Ansible and scripting with Python, Bash or PowerShell.\n\nKubernetes security: Kyverno, OPA Gatekeeper or similar, admission control, Pod Security Standards, RBAC, network policies and secrets management using Vault, External Secrets or equivalent.\n\nPlatform security: CIS-based Linux hardening, Windows Server hardening and runtime detection tools such as Falco.\n\nVulnerability management and incident response: Risk-based remediation, logging, SIEM solutions such as ELK or Wazuh, incident handling and forensics.\n\nAI security: Security controls for AI-assisted and agentic workflows, including autonomy boundaries, human review, prompt injection protection and secure credential handling.\n\nCompliance: NIS2, ISO 27001/27002 and GDPR.\n\nExperience with virtualisation platforms such as Proxmox is useful. Experience from the public sector or organisations subject to NIS2 is an advantage, but not essential.\nThe environment follows an open-source-first approach with EU-based infrastructure. Experience with US hyperscalers is not relevant to this assignment.\nYou must be fluent in Danish and English, both written and spoken, and able to work onsite full time in Copenhagen.\nWho you are\nYou are hands-on, security-conscious and pragmatic. You see security as an enabler rather than an obstacle, prioritise risks sensibly and enjoy helping experienced engineers strengthen their security practices. You take ownership, document your work and build solutions that others can maintain.\nWhy Twoday?\nAt Twoday, you will work with skilled colleagues on complex, business-critical solutions that make a real difference. We offer a collaborative environment with professional freedom, technical challenges and opportunities to develop your expertise.\nInterested?\nWe would love to hear from you. Apply today and help us build secure, reliable and future-ready digital platforms.\nDiversity & inclusion\nDo you not meet all the requirements? Studies show that women and minorities are less likely to apply if they don’t meet every qualification. At Twoday, we are committed to building an inclusive workplace where everyone is welcome.\nIf this role excites you, we encourage you to apply.","description_format":"text","description_chars":5195,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Danish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Supply Chain","Custom Software Development","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-08T07:41:41Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":50,"reasons":["conf:5","stale_co","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/twoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security","json_url":"https://alion.io/job/twoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security.json","meta":{"generated_at":"2026-10-15T22:28:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34103,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":617070},"rest":"https://alion.io/mcp/rest/get_company?id=617070"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftwoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftwoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftwoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/twoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftwoday-oy-senior-devsecops-engineer-kubernetes-software-supply-chain-security"}]}