Senior DevSecOps Engineer – Public Sector (Luxembourg/Brussels)

About the role

We are looking for a Senior DevSecOps Engineer to join a public sector organisation operating in Luxembourg and Brussels. The role is hybrid and focuses on embedding security throughout the software delivery lifecycle while maintaining high‑velocity CI/CD pipelines.

Key responsibilities

• Design, implement and continuously improve DevSecOps practices and CI/CD pipelines.
• Integrate security controls across the entire software development lifecycle.
• Perform source code analysis, drive vulnerability remediation and manage risk‑based remediation priorities.
• Support DAST and IAST testing using HCL AppScan.
• Establish and govern secure Git‑based development workflows, including SVN‑to‑Git migrations.
• Contribute to patch management and the vulnerability lifecycle process.
• Lead technical workshops and engage with customer stakeholders.
• Deliver projects on time, meeting high quality and security standards.

Required profile

• Extensive experience in DevSecOps, application security and CI/CD pipeline engineering.
• Strong background in secure software development and delivery lifecycles.
• Proven expertise in source code analysis and vulnerability remediation.
• Hands‑on experience with Git‑based workflows and migration projects.
• Solid understanding of HCL AppScan (both DAST and IAST).

Required skills

• Git
• Jenkins
• SonarQube
• HCL AppScan
• SVN
• CI/CD pipelines
• Application security tools