Associate DevSecOps Engineer (Luxembourg)

About the role

The Associate DevSecOps Engineer will join the Cloud, DevSecOps & SDLC Enablement Unit at the European Investment Bank headquarters in Luxembourg. Working on‑site, you will help embed security throughout the software delivery lifecycle and support the operation of the bank’s DevSecOps toolchain.

Key responsibilities

• Operate and provide day‑to‑day support for CI/CD platforms, code repositories, artifact management and Infrastructure‑as‑Code tooling, ensuring availability, stability and secure configuration.
• Maintain secure pipeline templates and shared components, applying the unit’s security baselines and platform standards.
• Assist the rollout of the EIB SDLC framework, implementing mandatory quality gates, automated controls and evidence‑collection mechanisms.
• Guide delivery teams on SDLC requirements, offering practical examples and tooling support under senior supervision.
• Integrate security controls such as static and dynamic code analysis, dependency and artifact scanning, secrets management and infrastructure security checks into the DevOps lifecycle.
• Monitor and help remediate security findings from automated scans, collaborating with delivery teams and senior DevSecOps engineers to prioritize fixes.

Required profile

• Willingness to work on‑site at the Luxembourg headquarters.
• Ability to collaborate with platform, application and security teams across the Group Information Systems Directorate.
• Interest in continuous learning within DevSecOps, cloud environments and secure software delivery.

Required skills

• Experience with CI/CD platforms (e.g., Jenkins, GitLab CI).
• Familiarity with code repositories (Git, Bitbucket).
• Knowledge of artifact management tools.
• Infrastructure‑as‑Code tooling (Terraform, Ansible, CloudFormation).
• Static and dynamic code analysis tools.
• Dependency and artifact scanning solutions.
• Secrets management practices.
• Basic understanding of cloud platforms and security monitoring.

What we offer

• Permanent full‑time contract with grade 4 classification.
• International, multicultural work environment.
• Relocation support for eligible candidates.
• Opportunities to develop expertise in DevSecOps and secure software delivery.