Experteer Overview
Por favor, asegúrese de leer atentamente los siguientes detalles antes de enviar cualquier solicitud.
In this role you design and lead robust software development security frameworks at Roche, bridging software and security engineering. You will shape security practices across development teams and mentor engineers, influencing long-term architecture for secure software. You collaborate with area architects and the Embedded Security u0026amp; Testing Team to integrate testing and security throughout the SDLC. This is a chance to drive secure delivery at scale and contribute to Roche’s mission to improve general healthcare.
Compensaciones / Beneficios
• Provide expert-level leadership in DevSecOps, covering threat modelling, code quality, SAST, secret scanning, SCA, IaC scanning, license compliance, dependency management, container image scanning, API security, and container runtime scanning
• Define Software Security best practices and ensure alignment with enterprise standards
• Lead strategic DevSecOps initiatives and mentor less experienced engineers
• Analyze complex business problems, drive root-cause analysis,
and propose innovative security solutions
• Foster strong stakeholder relationships, influence decisions, and act as a trusted advisor to leadership
• Evaluate strategic solutions, manage risk, and guide technology choices to support business transformation
• Mentor colleagues, contribute to Communities of Practice, and balance security compliance with developer productivity
Responsabilidades
• 8–10+ years of progressive experience in DevSecOps
• 3+ years of building xqbhyrx DevSecOps frameworks from scratch
• Hands-on, tool-agnostic expertise with DevSecOps enablement tools (e.g., SonarQube, GHAS, Sysdig, Snyk, IriusRisk, JFrog Xray, NowSecure)
• Design and implement automated security guardrails (SAST, SCA, container scanning) into DevOps workflows
• Experience with self-service DevOps platforms and security templates for product teams
• Strong understanding of supply chain security for software packages, libraries, and container images
Requisitos principales
•
📌 Expert DevSecOps Engineer (Expert Software Development Security Engineer) (Madrid)
🏢 Roche
📍 Madrid