G MASS Consulting are seeking two experienced DevSecOps Engineers to support a strategic security-by-design initiative across an Investment Bank's general engineering platforms.

These roles sit within a regulated investment banking environment and focus on embedding security controls directly into CI/CD and cloud delivery pipelines.

This role suits a hands-on DevSecOps Engineer who has worked at scale, understands regulated delivery environments and is comfortable balancing velocity with security and control. It is not a pure platform or advisory security role - delivery ownership is key.

Key Responsibilities

- Design, build and maintain secure, enterprise-grade CI/CD pipelines
- Embed automated security scanning, compliance checks, and vulnerability management into delivery workflows
- Automate infrastructure provisioning and application deployment using DevSecOps and IaC tooling
- Support and enhance containerised and cloud environments with a strong security-first mindset
- Partner closely with engineering, security,



and platform teams to enforce secure delivery standards

Requirements

- Enterprise CI/CD engineering (Jenkins and/or GitHub Actions)
- Secure pipeline design, secrets management and controlled release workflows
- Integration of security tooling such as SAST and code quality scanners (e.g. SonarQube, Fortify or equivalents)
- Strong AWS experience, including IAM (roles, policies, least-privilege), VPC fundamentals, EC2, S3, CloudWatch
- Infrastructure as Code using Terraform or CloudFormation
- Automation and scripting using Bash and Python (Groovy advantageous)

Nice to have

- Containerisation and orchestration (Docker, Kubernetes, EKS)
- OpenShift, Helm or enterprise container platforms
- Spanish speaking

Benefits

12-month contract.

Paying up to a maximum of $415 (C2C) & $380 (W2) per day, depending on experience.

Can be worked remotely, but must adhere to EST time zones.

📌 DevSecOps Engineer (Madrid)
🏢 G MASS
📍 Madrid