DevSecOps Engineer

About the role

We are looking for a DevSecOps Engineer to own our infrastructure reliability and technical security. You will build the internal DevSecOps function from the ground up, taking over from an external provider and embedding security‑first thinking into our R&D teams.

Key responsibilities

• Full DevOps ownership – ensure infrastructure reliability, CI/CD pipelines, deployment processes and system performance.
• Technical security leadership – implement security scanning in pipelines, manage secrets, handle vulnerability management, access control and container security.
• Maintain audit‑ready technical documentation such as architecture diagrams, data flows, access control records and security scan results.
• Promote a DevSecOps culture by embedding security‑first thinking into everyday R&D work and acting as a trusted technical partner.

Required profile

• 6+ years of hands‑on DevOps or SRE experience in a cloud environment.
• Proven experience embedding security tooling into CI/CD pipelines (SAST, dependency scanning, secrets detection, container security).
• Solid understanding of information security principles applied at the infrastructure level.
• ISO 27001 operational experience – audit preparation, ISMS documentation and technical controls.
• Strong technical documentation skills and the ability to influence without authority.
• Full fluency in English.

Required skills

• Google Cloud Platform (GCP)
• Kubernetes
• Kustomize
• GitLab
• Docker
• Prometheus / Grafana
• Snyk or SonarQube (security scanning tools)
• CI/CD pipeline tooling and security integrations (SAST, dependency scanning, secrets detection)
• ISO 27001 operational knowledge

What we offer

• Fixed salary €4,600 – €5,400 per month.
• Comprehensive benefits and the opportunity to become a shareholder.
• Hybrid work flexibility with a brand‑new office in Pasila, Helsinki.
• Meaningful mission in a leading human‑centred AI company.