DevSecOps / Application Security Engineer

About the role

Axiomatics, a developer of Attribute-Based Access Control (ABAC) solutions for banks, government agencies and global enterprises, is looking for an experienced DevSecOps / Application Security Engineer to join its Engineering team in Athens, Greece. The role strengthens security across the software delivery lifecycle, cloud infrastructure and CI/CD pipelines, acting as a bridge between development and platform security.

Key responsibilities

• Design, harden and maintain CI/CD pipelines on GitHub Actions, Jenkins and Bitbucket with automated security gates and break-the-build policies.
• Implement and manage SAST, SCA and container security scanning (SonarQube, Snyk, JFrog Artifactory/Xray).
• Lead vulnerability triage and prioritization using CVSS, EPSS and CISA KEV, and run DAST and API security assessments (OWASP ZAP, Burp Suite, Snyk API & Web).
• Secure AWS infrastructure, Kubernetes clusters (EKS) and Helm charts via GitOps with ArgoCD, and audit IaC security with Terraform/CloudFormation and Checkov/Trivy.
• Oversee supply-chain security, including SBOM management, image signing with Cosign and CVE remediation.
• Support compliance (ISO 27001, SOC 2, Cyber Resilience Act) and conduct threat modeling (STRIDE/OWASP) with engineering teams.

Required profile

• 5+ years of experience in DevOps, DevSecOps or platform security, including at least 3+ years focused on application security, CI/CD security or DevSecOps.
• Deep hands-on experience with AWS (EKS, ECR, IAM, VPC, Secrets Manager) and Kubernetes in production.
• Excellent written and spoken English.
• Nice to have: CKS, AWS Security Specialty or OSCP certification; OAuth 2.0 / OIDC, Keycloak, ABAC, XACML; Policy-as-Code (OPA, Kyverno); penetration testing.

Required skills

• Python and Bash scripting, including automation via REST APIs (Jira, Slack, Snyk, SonarQube)
• Java build tools (Maven, Gradle) and dependency remediation
• Secrets management, SIEM logging, access reviews and incident response

What we offer

• Flexible hybrid working model in Greece with home office support
• Competitive compensation and private health insurance
• Learning opportunities, access to security certifications and modern tooling

Applications are handled by the recruitment agency Randstad; only applications submitted through the online portal are considered.