DevSecOps Engineer
Il y a 3 heures
Ghent, Flanders, Belgique
Sofico
Temps plein
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
pAt bSOFICO /b, we’re shaping the future of mobility
- and we’re doing it together. Our software, Miles, is a leading platform that enables companies worldwide to manage their leasing, fleet, and mobility operations in one integrated system. Every day, we help our customers work smarter, more efficiently, and stay ahead in a rapidly evolving industry.br/Behind that impact is a close-knit, international team that values collaboration, ownership, and continuous growth. We move forward with ambition but stay grounded in a culture where people support each other and take pride in what they build.br/From our office in bZwijnaarde (Ghent) /b, we’re looking for an bDevSecOps Engineer /bwho’s eager to contribute to bdelivering seamless, scalable, and reliable integrations that support customers' business processes /b. /p h3What you’ll do... /h3 pAs a DevSecOps Engineer, you’ll help keep our platforms, endpoints, and cloud environments secure throughout their lifecycle. You’ll embed security controls into day-to-day operations, focusing on vulnerability management, patch management, and lifecycle management. Working closely with IT, infrastructure, and development teams, you’ll help remediate risks, automate security controls, and ensure our security requirements are effectively implemented in production. /p ul liTake ownership of the vulnerability management lifecycle, from discovery and risk-based prioritization to remediation tracking and reporting. /li liCoordinate patch management across servers, endpoints, containers, and cloud workloads, ensuring agreed security SLAs are met. /li liMonitor asset and software lifecycles, identifying end-of-life and end-of-support components and coordinating timely upgrades or decommissioning. /li liOperate and continuously improve security tooling, including monitoring solutions, XDR, SIEM, vulnerability scanners, and configuration baselining tools. /li liImplement and strengthen security controls across infrastructure-as-code, CI/CD pipelines, and cloud configurations, following recognized baselines such as CIS and NIST. /li liInvestigate operational security events, support incident response, and translate lessons learned into preventive measures. /li liTurn compliance requirements and risk treatment decisions into actionable operational tasks, runbooks, and automation. /li liEnsure security controls are measurable, traceable, and properly documented to support internal and external audits. /li /ul h3What you bring... /h3 pYou’re passionate about cybersecurity and enjoy finding practical ways to make systems more secure without compromising their reliability. You combine a hands-on approach with an automation mindset and enjoy collaborating with different teams to turn security requirements into effective technical solutions. /p ul liHands-on experience with vulnerability management, patch management, and lifecycle management across hybrid on-premises and cloud environments. /li liA solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure. /li liWorking knowledge of scripting and automation using PowerShell, Bash, or Python, as well as infrastructure-as-code tools such as Terraform and Ansible. /li liFamiliarity with cybersecurity frameworks such as ISO 27001 and NIS2, and the ability to translate requirements into operational controls. /li liKnowledge of security benchmarks, including CIS Benchmarks, and the ability to identify and implement improvements based on maturity assessments. /liliExperience with SIEM/EDR tooling and using threat intelligence to prioritize remediation activities. /li liFluency in English; additional languages are a plus. /li /ul h3What’s in it for you... /h3 ul liCompetitive salary package /li liCompany car with fuel/charging card or a flexible mobility budget /li liMeal vouchers, eco vouchers, and a monthly net expense allowance /li liHospitalization insurance and group insurance /li liHybrid working, flexible hours, and generous vacation days (including ADV and seniority leave) /li liBike leasing and additional mobility benefits /li liModern, easily accessible office in Ghent with EV charging facilities /li liStructured onboarding with a dedicated coach from day one /li liContinuous learning and career development in an international, multicultural company /li liA vibrant company culture with regular team events, family days, sports activities, and celebrations /li /ul h3Ready to make an impact in the world of mobility? Join SOFICO and let’s shape what’s next together /h3
- and we’re doing it together. Our software, Miles, is a leading platform that enables companies worldwide to manage their leasing, fleet, and mobility operations in one integrated system. Every day, we help our customers work smarter, more efficiently, and stay ahead in a rapidly evolving industry.br/Behind that impact is a close-knit, international team that values collaboration, ownership, and continuous growth. We move forward with ambition but stay grounded in a culture where people support each other and take pride in what they build.br/From our office in bZwijnaarde (Ghent) /b, we’re looking for an bDevSecOps Engineer /bwho’s eager to contribute to bdelivering seamless, scalable, and reliable integrations that support customers' business processes /b. /p h3What you’ll do... /h3 pAs a DevSecOps Engineer, you’ll help keep our platforms, endpoints, and cloud environments secure throughout their lifecycle. You’ll embed security controls into day-to-day operations, focusing on vulnerability management, patch management, and lifecycle management. Working closely with IT, infrastructure, and development teams, you’ll help remediate risks, automate security controls, and ensure our security requirements are effectively implemented in production. /p ul liTake ownership of the vulnerability management lifecycle, from discovery and risk-based prioritization to remediation tracking and reporting. /li liCoordinate patch management across servers, endpoints, containers, and cloud workloads, ensuring agreed security SLAs are met. /li liMonitor asset and software lifecycles, identifying end-of-life and end-of-support components and coordinating timely upgrades or decommissioning. /li liOperate and continuously improve security tooling, including monitoring solutions, XDR, SIEM, vulnerability scanners, and configuration baselining tools. /li liImplement and strengthen security controls across infrastructure-as-code, CI/CD pipelines, and cloud configurations, following recognized baselines such as CIS and NIST. /li liInvestigate operational security events, support incident response, and translate lessons learned into preventive measures. /li liTurn compliance requirements and risk treatment decisions into actionable operational tasks, runbooks, and automation. /li liEnsure security controls are measurable, traceable, and properly documented to support internal and external audits. /li /ul h3What you bring... /h3 pYou’re passionate about cybersecurity and enjoy finding practical ways to make systems more secure without compromising their reliability. You combine a hands-on approach with an automation mindset and enjoy collaborating with different teams to turn security requirements into effective technical solutions. /p ul liHands-on experience with vulnerability management, patch management, and lifecycle management across hybrid on-premises and cloud environments. /li liA solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure. /li liWorking knowledge of scripting and automation using PowerShell, Bash, or Python, as well as infrastructure-as-code tools such as Terraform and Ansible. /li liFamiliarity with cybersecurity frameworks such as ISO 27001 and NIS2, and the ability to translate requirements into operational controls. /li liKnowledge of security benchmarks, including CIS Benchmarks, and the ability to identify and implement improvements based on maturity assessments. /liliExperience with SIEM/EDR tooling and using threat intelligence to prioritize remediation activities. /li liFluency in English; additional languages are a plus. /li /ul h3What’s in it for you... /h3 ul liCompetitive salary package /li liCompany car with fuel/charging card or a flexible mobility budget /li liMeal vouchers, eco vouchers, and a monthly net expense allowance /li liHospitalization insurance and group insurance /li liHybrid working, flexible hours, and generous vacation days (including ADV and seniority leave) /li liBike leasing and additional mobility benefits /li liModern, easily accessible office in Ghent with EV charging facilities /li liStructured onboarding with a dedicated coach from day one /li liContinuous learning and career development in an international, multicultural company /li liA vibrant company culture with regular team events, family days, sports activities, and celebrations /li /ul h3Ready to make an impact in the world of mobility? Join SOFICO and let’s shape what’s next together /h3