Job Description, Responsibilities & Requirements
About the Position
We are looking for a DevSecOps / Application Security Engineer to join a forward-thinking technology team supporting large-scale digital transformation and cloud modernization initiatives.
If you are passionate about secure software development, cloud-native security, and embedding security into every stage of the development lifecycle, this role offers an exciting opportunity to work in a collaborative and innovation-driven environment.
Responsibilities
- Define, standardize, and evolve Secure Software Development Life Cycle (S-SDLC) practices across multiple engineering teams
- Integrate and manage application security testing tools (SAST, DAST, SCA) within CI/CD pipelines
- Lead vulnerability management initiatives across cloud environments and Kubernetes clusters
- Maintain, automate, and improve infrastructure security controls, including WAF configurations and network security policies
- Guide development and DevOps teams on secure coding practices and DevSecOps principles
- Ensure alignment with industry standards and frameworks such as OWASP, CIS Benchmarks, and DORA
- Support continuous improvement of security posture across applications and infrastructure
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience
- Solid professional experience as a Security Engineer with a strong focus on Application Security and DevSecOps practices
- Hands-on experience with containerization technologies and orchestration platforms (e.g., Docker, Kubernetes)
- Strong programming and scripting skills (Python, Bash, Java, Go, or similar)
- Good understanding of security standards and frameworks, including OWASP Top 10 and ISO 27001
- Strong communication skills and ability to work effectively with both technical and non-technical stakeholders
- Proactive, responsible, and collaborative mindset
Nice to Have
- Certifications such as CKA (Certified Kubernetes Administrator) or CKS (Certified Kubernetes Security Specialist)
- Strong analytical skills for threat detection and security risk assessment
- Excellent communication abilities to translate technical security concepts into business impact
- Experience aligning security requirements with cloud modernization and business objectives
We Offer
- Competitive salary
- Opportunity to work in a dynamic and innovative environment
- Professional development opportunities
About the Company
At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.
Diversity, equity and inclusion | Sustainability | Tieto
Important Advisory Regarding Recruitment Fraud
Tieto has been made aware of fraudulent recruitment activities being carried out by individuals falsely impersonating our organization.
Learn more