DevOps engineer in application security

We are looking for a Senior DevOps Engineer with more than 7 years of experience and strong expertise within the Azure ecosystem to join our team in Barcelona, supporting a major international client.

• Your mission will be to drive the adoption of DevSecOps practices across application teams, integrating security analysis capabilities (SAST with SonarQube) into their CI/CD pipelines and supporting them throughout the vulnerability remediation process.
• Build and maintain templates for SonarQube Advanced Security configurations.
• Collaborate with application owners, guiding them through the integration of security templates into their CI/CD pipelines and ensuring proper implementation.
• Support development teams by resolving questions and issues related to security and pipeline configurations.
• Generate reports on security vulnerabilities identified through SonarQube, assessing their nature and severity.
• Communicate findings to application teams, helping them identify false positives and guiding them through investigation and remediation activities.
• Follow up with teams to ensure remediation plans are progressing and provide regular status reporting.
• Design, build, and manage scalable cloud infrastructure within Azure environments.
• Develop automated CI/CD pipelines, Infrastructure as Code (IaC) templates, scripting modules, and monitoring and alerting solutions.
• Produce technical documentation and facilitate knowledge transfer across teams.

• Degree in Computer Science, Software Engineering, or a related field (or equivalent practical experience).
• 5+ years of experience in Software Engineering.
• 5+ years of proven experience in DevOps, Cloud Engineering, or similar roles
• Azure DevOps
• Azure Application Insights, Alerts, and Logic Apps
• OpenShift
• PowerShell, Bash, or TypeScript scripting
• DevSecOps practices, CI/CD strategies, and branching strategies
• SAST (Static Application Security Testing)
• Infrastructure as Code (IaC)
• Experience managing large-scale Azure environments.
• Strong background in automation and scripting within enterprise environments.
• Professional working proficiency in English.
• They will have access to confidential information related to Capitole Consulting and the project they are assigned to.
• They must comply with the information security policies, as well as the internal policies and procedures of both Capitole Consulting and the client.
• They will be required to sign a Non-Disclosure Agreement (NDA).

• Individual training budget of €1,200 (languages, books, certifications, etc.).
• Flexible remuneration package.
• Hybrid model: 2 days per week at our city center office, remote the rest of the week.
• Discounts at sports centers (AndJoy).
• Free private health insurance.
• Monthly follow-up meetings with your manager for continuous feedback.
• Access to our Technology Communities, where you can share knowledge, learn from colleagues, and grow professionally.