Associate DevSecOps Engineer (Luxembourg)

About the role

The Associate DevSecOps Engineer will embed security throughout the software delivery lifecycle for the European Investment Bank. Working in Luxembourg’s headquarters, you will collaborate with experienced DevSecOps engineers, development, infrastructure and security teams to build and maintain secure, automated CI/CD pipelines and cloud platforms.

Key responsibilities

• Operate and provide day‑to‑day support for the DevSecOps toolchain, including CI/CD platforms, code repositories, artifact management and Infrastructure‑as‑Code tooling.
• Maintain secure CI/CD pipeline templates and shared components, applying platform standards and security baselines.
• Support the rollout and adoption of the EIB SDLC framework, implementing mandatory quality gates, automated controls and evidence‑collection mechanisms.
• Embed security controls such as static and dynamic code analysis, dependency and artifact scanning, secrets management and infrastructure security checks.
• Monitor, triage and remediate security findings identified through automated scans, working with delivery teams and senior engineers.

Required profile

• Relevant technical background with interest in secure software delivery.
• Ability to work closely with cross‑functional teams and support the adoption of DevSecOps practices.
• Willingness to work on‑site in Luxembourg on a regular basis.

Required skills

• CI/CD platforms
• Code repositories
• Artifact management
• Infrastructure‑as‑Code tooling
• Static code analysis
• Dynamic code analysis
• Dependency and artifact scanning
• Secrets management
• Infrastructure security checks
• Vulnerability management
• Security monitoring
• Cloud environments

What we offer

• Permanent contract (grade 4) with full‑time employment.
• Relocation support and a truly international, multicultural work environment.
• Hands‑on exposure to modern secure software delivery, cloud platforms and resilience engineering.
• Opportunities to develop expertise in DevSecOps and influence security practices across the organization.