The English-language job board for Spain

Senior DevSecOps Engineer

Remote, Europe·Added yesterday (last checked 28 Oct)

JustMarkets

72 open roles

Apply

Our summary

Work mode: Remote (Europe)
English: Required
Other languages: Russian
Experience: 3+ years
Benefits: Gym access

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
May fit the digital nomad visa
A remote job for a company outside Spain: you apply yourself, no sponsor needed. It asks for about €2,849 a month in remote income.

More jobs that may fit the digital nomad visa

Skills

Nice to have

Requirements

What we're looking for

At least 3+ years of hands-on experience in DevSecOps engineering roles
Strong understanding of Git workflows and CI/CD pipelines, with the ability to design reusable integrations, investigate failed jobs and assess the impact of changes on software delivery
Practical experience configuring static application security testing (SAST), software composition analysis (SCA) and secrets scanning, tuning rules, investigating false positives and routing results to the right teams
Ability to write, test and maintain automation in a suitable language, such as Python, Bash or Go, and integrate systems through APIs. A specific language is less important than reliable, maintainable integrations
Experience implementing security checks or policies as code, with version control, testing and controlled changes
Practical experience securing and hardening cloud environments with at least one major cloud provider (AWS preferred), including automated compliance checks against agreed security requirements
Working knowledge of Linux and container-based build environments, including permissions, credentials and logs needed to troubleshoot security tooling
Understanding of common application, dependency and exposed-secret risks; ability to distinguish a tool failure from a security finding and identify when specialist review is needed
Ability to maintain clear coverage records, operational runbooks and reporting using pipeline, scanner and work-item data
Strong problem-solving, communication, and collaboration skills, with the ability to take ownership of technical tasks and coordinate with cross-functional teams

Nice to have

Direct experience with GitLab CI/CD security integrations
Experience with Terraform or Kubernetes security checks
Software supply-chain security, including software bills of materials (SBOMs), artifact signing or build provenance
Experience integrating dynamic application security testing (DAST), or using AI-assisted tools to improve security automation with appropriate review
Experience in fintech, trading, payments or other security-sensitive product environments

Languages

English(В1), Russian (fluent)

Pay & benefits

What you'll get

20 paid vacation days per year
10 paid sick leave days per year
Public holidays as per the company's approved Public holiday list
Medical budget
Professional education budget
Language learning budget
Wellness budget (gym membership, sports gear and related expenses)

The role

We are looking for a Senior DevSecOps Engineer to join our Product Security team and help strengthen security across our software development lifecycle.

In this role, you will design, implement, and maintain security integrations within CI/CD pipelines, automate security workflows, and improve the reliability and effectiveness of security controls.You will work closely with Application Security, Cloud Security, DevOps, Platform, and Engineering teams to ensure that security checks are integrated seamlessly into development workflows, vulnerabilities are identified and addressed efficiently, and developers receive clear, actionable feedback.

This is a hands-on technical role offering the opportunity to influence how security tooling and automation are implemented across our engineering environment.

Responsibilities

What you'll do

Integrate and maintain SAST, SCA and secrets scanning in CI/CD pipelines and developer workflows
Build reusable pipeline integrations and security rules managed as code, including agreed cloud configuration checks with Cloud Security and DevOps. Test changes, plan safe rollouts with pipeline owners and verify that required checks run across the agreed scope
Tune scanner rules and configurations to reduce false positives and give developers useful feedback. Validate changes with AppSec, record exclusions and avoid hiding real risks to keep pipelines green
Troubleshoot failed scans, broken integrations and security-related pipeline failures. Restore controls or escalate blockers promptly, explaining the impact and the action needed
Automate finding collection, duplicate handling, ticket creation and status updates. Ensure validated High pipeline and secrets findings have an owner, action and due date; follow up and escalate unresolved ownership or blockers
Work with AppSec and developers to validate findings, improve remediation guidance and check fixes where needed. Turn recurring problems into reusable checks and workflow improvements
Apply scanner configuration changes within the approved baseline. Recommend new gates, tool changes and exception-handling improvements for approval; escalate pipeline-breaking issues or critical unowned findings to Manager (DevSecOps & Application Security)
Maintain clear coverage records, troubleshooting guides and operational runbooks. Use pipeline and tool data to show missing checks, control failures and outstanding findings, and share knowledge so others can support the integrations

How you'll work

Opportunity to work remotely

Hiring process

Application review, one or more interviews, then an offer; described as fast and easy 1 interview

Applications are reviewed quickly and candidates are kept informed at every step.

About JustMarkets

JustMarkets is a global fintech company operating in the multi-asset brokerage space, providing retail and institutional clients with access to trading in forex, commodities, indices, and shares. The company has grown into an international brand with a significant presence across multiple regions, including Europe, Asia, and Latin America, and is known for its proprietary trading platforms and customer-centric approach.

In Spain, JustMarkets has established a dedicated hub to support its growing client base and expand its European footprint. The company's Spain office is a key part of its global operations, offering roles in engineering, product, design, marketing, and finance. For international professionals, JustMarkets presents opportunities to work in a fast-paced, multicultural environment, with a strong emphasis on technology and data-driven decision-making, making it an attractive option for those looking to build a career in the fintech sector in Spain.

Industry: Fintech
Founded: 2012
Employees: 500–1,000
Headquarters: Limassol, Cyprus
In Spain: Madrid

Good to know if you are moving

The company's global HQ is in Limassol, Cyprus, but its Spain office in Madrid is a key hub for European operations, offering a range of roles in tech, product, and marketing.
JustMarkets is a global fintech company, so English is likely the working language, making it accessible for international professionals.
The company offers a modern tech stack and data-driven approach, which can be appealing for engineers and data specialists.
Roles in Spain span a wide range of functions, from engineering and design to finance and HR, indicating a multi-disciplinary environment.
As a regulated broker, the company offers a stable and compliance-focused work environment, which is a plus for professionals from the financial sector.

All open roles at JustMarkets