Associate DevSecOps Engineer (Luxembourg)

About the role

The Associate DevSecOps Engineer will embed security throughout the software delivery lifecycle for the European Investment Bank. Working in the Cloud, DevSecOps & SDLC Enablement Unit, you will support secure, automated and compliant CI/CD pipelines and cloud environments while collaborating with development, infrastructure and security teams.

Key responsibilities

• Operate and support the DevSecOps toolchain (CI/CD platforms, code repositories, artifact management, infrastructure‑as‑code tooling) ensuring availability, stability and secure configuration.
• Maintain secure CI/CD pipeline templates and shared components, applying platform standards and security baselines.
• Support rollout and adoption of the EIB SDLC framework, including mandatory quality gates, automated controls and evidence collection.
• Embed security controls such as static and dynamic code analysis, dependency and artifact scanning, secrets management and infrastructure security checks.
• Monitor and remediate security findings from automated scans in collaboration with delivery teams and senior engineers.

Required profile

• Reports to the Head of Cloud, DevSecOps & SDLC Enablement Unit.
• Cooperates with platform teams and application teams across the Group Information Systems Directorate.

Required skills

• CI/CD platforms
• Code repositories
• Artifact management
• Infrastructure‑as‑code tooling
• Static code analysis
• Dynamic code analysis
• Dependency scanning
• Artifact scanning
• Secrets management
• Infrastructure security checks

What we offer

• Permanent contract (grade 4 Associate Engineer)
• Relocation support
• International, multi‑cultural work environment
• Regular office presence at Luxembourg headquarters