DevSecOps & Secure‑SDLC Engineer

About the role

Join Marsh’s DevSecOps & Secure‑SDLC team in Cluj‑Napoca, working hybrid with at least three days a week on‑site. You will lead initiatives to embed security into the software development lifecycle and CI/CD pipelines.

Key responsibilities

• Lead and enhance the Secure‑SDLC framework and integrate it with DevSecOps processes.
• Select, assess, and pilot application security tools, conducting full POCs.
• Automate security scans (SAST, DAST, SCA) and integrate them into CI/CD pipelines.
• Draft documentation and guidelines for Secure‑SDLC and DevSecOps for internal teams.
• Monitor industry publications (e.g., NIST, ISO) and advise on impact to AppSec programs.

Required profile

• 5+ years of experience in DevSecOps and Secure‑SDLC.
• Relevant certifications such as CISSP or CSSLP.
• Proven ability to design, implement, and roll out security automation.
• Experience advising application security leadership on best practices.

Required skills

• DevSecOps automation and CI/CD pipeline integration.
• Secure‑SDLC processes and tooling.
• Application security tools: SAST, DAST, SCA, threat modeling, supply‑chain security.
• Familiarity with security frameworks: OWASP Top 10, SANS Top 25, CWE.
• Cloud security concepts and at least one programming language.

What we offer

• Professional development opportunities and supportive leadership.
• Inclusive culture with flexible benefits up to 20% of salary.
• 30+ days of paid time off plus birthday day.
• Performance bonus scheme and charitable contribution matching.
• Core benefits: pension, life and medical insurance, meal vouchers, travel insurance.