DevSecOps Engineer

28Stone is one of just 4 capital markets companies in Latvia. But what really sets us apart is that all of our clients are in the US and UK. So we are operating on a truly global scale, building financial solutions for some of the most developed markets in the world.

We are an IT consulting company specializing in capital markets technology and financial infrastructure- basically, we help major financial institutions operate more efficiently by creating custom software solutions.

The capital markets space in Latvia is still pretty small, so working at 28Stone gives you a unique mix- you get to be part of a focused team, but also work on international projects that make a real impact.

We celebrate winning the Top 1% Workplace Awards 2024 in the “Best Workplace for Talent Investment” category and are always seeking to expand our team with positive, open-minded and motivated individuals who are eager learn as well as share what they know.

Impact Zone

• Daily monitoring of DevSecOps tools to ensure regular application scanning as specified in security policies.


• Coordinate with teams to remediate vulnerabilities identified using tools such as Invicti, SonarQube, Sonatype, and Tenable.


• Create monthly security reports for management showing application vulnerabilities and remediation status with teams.


• Work closely with other teams to onboard and assist them in using our tools. In case of any issues with the tools that our team cannot resolve, escalate the issue to the vendor and coordinate support sessions until the issue is resolved.


• Ensure compliance with our security policies and ensure that teams have taken secure coding trainings as specified in security policies.


• Lead and oversee data encryption initiatives to ensure data security during rest and transit.


• Coordinate with relevant teams API vulnerabilities identified by Traceable AI.


• Coordinate the process of applications APIs are cataloged in Mulesoft, ensuring we have an up-to-date API inventory.

Qualifications & Experience

• Bachelor’s degree in computer science, Information Security, or a related field.


• At least 2 years of experience in DevSecOps, cybersecurity, or a related IT security role.


• Hands-on experience in vulnerability management and coordinating using at least one of the tools: Invicti (Previously Netsparker), SonarQube, Sonatype, Traceable AI or Tenable.


• Hands-on experience on data encryption projects, with a focus on securing data at rest and in transit.


• Experience in escalating and resolving technical issues with vendors.


• Excellent communication skills, capable of effectively coordinating with various teams.


• Strong written and verbal communication skills in English.

Compensation

20 - 24  EUR/hour.

We are flexible and use an individual approach with each candidate we meet, so we invite you to apply even if you do not meet some of the listed requirements.

Only candidates who have the right to work in Latvia are considered for this position.

The mentioned remuneration may vary depending on the candidate’s skills, qualifications, and experience.

Please read our Careers Privacy Statement found on our website.

#LI-Remote