Devsecops Engineer
Pubblicato il 23-08-2026 - Reevo in Monza
We are a European Cloud & Cybersecurity Provider supporting medium-sized and large companies in managing and protecting their IT ecosystems. Through highly reliable Cloud services, advanced Cybersecurity solutions, we help organizations ensure business continuity, security and digital innovation every day. With offices across Italy, France, Spain and Switzerland, we combine an international mindset with strong local expertise, supporting customers through a team of skilled professionals and cutting-edge technologies. What drives us is not only what we do, but how we do it : we believe in collaboration across teams and countries, transparency in the way we work and communicate, and accountability in delivering concrete and reliable results for our internal and external customers. As part of the growth of our Cloud Native division, we are looking for a Devsecops Engineer responsible for integrating security practices into the software development and deployment processes. This includes automating security checks, monitoring cloud-native applications,
and ensuring compliance with industry standards. The role collaborates with development, operations, and security teams to build secure, scalable, and reliable cloud infrastructure. Additionally, the DevSecOps Engineer continuously improves CI/CD pipelines, identifies vulnerabilities, and implements proactive measures to reduce risks across cloud-native environments. Responsibilities of the selected candidate include: Integrate SAST/DAST and Container Scanning tools into CI/CD pipelines to detect vulnerabilities early ("Shift Left"). Design and enforce Policy-as-Code (e.g., OPA/Kyverno) to prevent non-compliant deployments in Kubernetes. Manage Vulnerability Management lifecycle, prioritizing remediation of critical CVEs in base images and dependencies. Monitor runtime security threats (using tools like Falco) and lead Incident Response for security breaches. Collaborate with developers to promote secure coding practices