DevSecOps Lead

Qualco Technology

DevSecOps Lead managing secure engineering pipelines for digital payments platform at Quento Technologies. Overseeing CI/CD, security standards, and cloud delivery practices.

Posted 7/2/2026full-timeAthens • 🇬🇷 GreeceSeniorWebsite

Tech Stack

Tools & technologies

AzureCloudKubernetesNode.jsSDLCVault

About the role

Key responsibilities & impact

Own and enforce DevSecOps standards across CI/CD pipelines, infrastructure, environments, deployments, and operational controls;
Design, maintain, and improve CI/CD flows across Azure DevOps, container builds, artifact management, image scanning, Kubernetes deployments, Helm, and GitOps/ArgoCD where applicable;
Ensure secure AKS operations, including identity integration, RBAC, private cluster principles, node pool separation, network policies, Key Vault integration, and container security controls;
Embed security into the SDLC through code scanning, dependency scanning, container image scanning, secrets management, vulnerability remediation, and secure configuration management;
Govern controls related to TLS, mTLS, SSL pinning, OAuth2, HTTP signatures, encryption, certificates, Key Vault, WAF, and firewall/network controls;
Own observability standards including logging, metrics, alerting, health checks, incident routing, SIEM integration, and audit log forwarding;
Work with security teams to integrate cloud security posture management, SIEM, WAF logs, AKS audit logs, API Management logs, Azure Activity logs, database logs, and firewall logs;
Support production readiness, disaster recovery, high availability, rollback, environment consistency, and incident response preparation;
Collaborate with Architects, Technical Leads, QA, Service Manager, and delivery teams to ensure secure, repeatable, and auditable releases;
Ensuring that all activities and duties are carried out in full compliance with regulatory requirements and supporting the continued implementation of the Group Anti-Bribery and Corruption Policy.

Requirements

What you’ll need

University degree in Computer Science, Engineering, or a related field;
Deep experience in DevSecOps for Azure, AKS, Kubernetes, containers, CI/CD, GitOps, cloud security, WAF, SIEM, and regulated production environments.
Strong understanding of secure SDLC, infrastructure security, identity/security controls, certificate management, monitoring, and incident response.
Hands-on experience with Azure DevOps pipelines, container registries, Helm, Kubernetes deployments, and environment automation.
Experience implementing code, dependency, container, and configuration scanning in delivery pipelines.
Ability to define operational standards, deployment runbooks, rollback procedures, and production readiness controls.
Strong collaboration skills with security, architecture, QA, operations, and engineering teams.
**Preferred Qualifications**
Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Key Vault, Cloudflare WAF, Check Point Firewall, and Azure Application Insights;
Experience in banking, payments, fintech or other regulated production environments;
Familiarity with PSD2/SCA security considerations and audit evidence preparation.

Benefits

Comp & perks

Competitive compensation, ticket restaurant card, and annual bonus programs
Cutting-edge IT equipment, mobile and data plan
Modern facilities, free coffee and beverages, indoor parking, and company bus
Private health insurance, onsite occupational doctor, and workplace counselor
Flexible working model, hybrid benefits & home equipment benefits
Onsite gym, wellness facilities, and ping pong room
Career and talent development tools
Mentoring, coaching, personalized annual learning and development plan
Employee referral bonus, regular wellbeing, ESG and volunteering activities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Secure SDLCInfrastructure SecurityCode ScanningContainer SecurityVulnerability RemediationRBACTLSIncident ResponseDeployment AutomationMonitoring

Soft Skills

CollaborationCommunication