DevSecOps Specialist

Digital Services is a dynamic unit responsible for creating a wide range of services for both corporate and consumer customers. We employ a variety of different talent ranging from designers to developers to product owners and more, all working together to innovate and deliver new services.

We are seeking a highly skilled and motivated DevSecOps Specialist to join Elisa's Digital Services

You will help enhance our security posture while maintaining a seamless development and deployment process. The ideal candidate will have solid experience in DevSecOps tooling, secure CI/CD pipelines, infrastructure security, and a passion for coaching teams on security best practices.

Key Responsibilities:

• DevSecOps Tooling
  • Implement and maintain tools and processes for secret management, dependency scanning (Dependabot), and security testing (SAST/DAST), and software bill of materials (SBOM).
  • Develop and secure CI/CD workflows using GitHub Actions. Automate security checks and implement guardrails in the pipeline.
• Infrastructure Security
  • Develop and enforce security policies for containerized environments running on Kubernetes and cloud environments.
• Programming & Automation
  • Write automation scripts and tools using Python and Golang. Build custom security tools and utilities where necessary.
• Security Mindset & Coaching
  • Advocate for security best practices across engineering teams. Coach and mentor developers and operations staff on secure development and deployment techniques.

What we hope from you:

• Proven experience in DevSecOps or a similar role.
• Solid knowledge of DevSecOps tooling (secret management, SAST, DAST, SBOM tools).
• Expertise with CI/CD pipelines, especially GitHub Actions.
• Hands-on experience with Prometheus and Grafana for monitoring and metrics.
• Good knowledge of Kubernetes security.
• Proficiency in Python and Golang for automation and scripting.
• Excellent communication and interpersonal skills in English.
• Passion for coaching and promoting a security-first mindset within development teams.

Nice to Have:

• Experience with cloud platforms such as AWS, GCP, or Azure.
• Familiarity with threat modeling and secure architecture reviews.
• Knowledge of compliance frameworks and security standards (e.g., SOC 2, ISO 27001).

Your closest stakeholders are based in Helsinki, Pasila. Our team follows Elisa's hybrid working policies.

Why Elisa?

Elisa is one of Finland's best places to work, by proof. We highly appreciate our flexible working conditions, the endless learning opportunities, and the friendly and laid-back culture, among other awesome things. Welcome to join us and see it all for yourself

Interested? Send us an application via the link below. If you have any questions, don't hesitate to ask Antti on antti.seppala[at]elisa.fior Matti on matti.hiljanen [at] elisa.fi.

The chosen candidate will undergo drug test and a security clearance vetting, which in turn requires having stayed in Finland for multiple years.

#MissionPossible

#Li-hybrid

Apply between 25 March 2025 and 9 April 2025 23:59 (Europe/Helsinki)

• Occupational healthcare
• Company bike benefit
• Company car benefit
• Support for sports and culture services (Epassi)

Elisa is a pioneer in telecommunications and digital services, and technologies. We provide sustainable solutions for over 2.8 million consumer, corporate and public administration customers in our core markets of Finland and Estonia as well as in over 100 countries internationally. Today, Elisa employs more than 5,700 professionals in over 20 countries.

Elisians work every day to build a safe and sustainable digital environment for all of us. Our long-term sustainability work is also reflected in international assessments: Elisa is one of the 100 most sustainable companies in the world. You can read more about our sustainability work here

#J-18808-Ljbffr

---