DevSecOps Security Engineer — Secure CI/CD & App Delivery

NTT DATA Europe & Latam is seeking a skilled Security Testing Engineer in Emilia-Romagna to help secure software delivery across our CI/CD pipelines. You will implement security measures, run SAST/DAST, conduct software composition analysis, and review code for vulnerabilities to prevent security gaps.

The ideal candidate has 3–5 years of experience with security testing tools and automation, knowledge of DevSecOps, OWASP/CIS benchmarks, and excellent English communication.

Implement security measures within CI/CD pipelines to ensure secure software delivery. Use SAST/DAST tools for analysing source code or binaries and identify vulnerabilities. Perform Software Composition Analysis (SCA) to detect vulnerabilities in open-source libraries and third-party components. Conduct code security reviews and triage security findings. Collaborate with developers to fix identified vulnerabilities and ensure secure coding practices. Manage security testing automation processes and integrate tools with CMDB and ticketing systems. Provide clear, actionable communication of findings and remediation recommendations to stakeholders. Bachelor's degree in Computer Science, Information Technology, or a related field. 3–5 years of experience in security testing tools and automation. Knowledge of DevSecOps practices and CI/CD pipeline integration. Familiarity with industry standards like OWASP, CIS Benchmarks, and secure coding guidelines. Strong collaboration and communication skills for working with developers and stakeholders. Excellent command of both spoken and written English.