Senior DevSecOps Engineer (Kubernetes & Software Supply Chain Security)

Location: Onsite full time in Copenhagen, Denmark

Company

hirify.global is a Northern European digital transformation partner delivering software, data, AI, digital experience, and business application solutions for public and private organizations.

What you will do

• Implement automated security controls across CI/CD pipelines, including SAST, SCA, secret, container, and Infrastructure as Code scanning.
• Secure the software supply chain through SBOM generation, artifact signing and verification, SLSA principles, and secure branch, review, and release processes.
• Implement Kubernetes security controls covering admission control, policy-as-code, Pod Security Standards, RBAC, network policies, and secrets management.
• Harden Linux and Windows environments and manage vulnerabilities from identification through remediation.
• Support runtime threat detection, security monitoring, incident response, and forensic investigations.
• Establish security frameworks for AI-assisted development and autonomous AI agents, including permissions, review gates, traceability, prompt injection protection, and secure credential handling.

Requirements

• Practical experience implementing DevSecOps security controls in development and production environments.
• Experience with software supply chain security, CI/CD automation, secure runners, Terraform, Ansible, and Python, Bash, or PowerShell scripting.
• Experience securing Kubernetes with Kyverno, OPA Gatekeeper, admission control, Pod Security Standards, RBAC, network policies, and Vault, External Secrets, or equivalent tools.
• Knowledge of CIS-based Linux hardening, Windows Server hardening, runtime detection, vulnerability management, SIEM, incident handling, and forensics.
• Knowledge of NIS2, ISO 27001/27002, and GDPR, plus security controls for AI-assisted and agentic workflows.
• Fluent Danish and English, written and spoken, and availability for full-time onsite work in Copenhagen are required.

Nice to have

• Experience with virtualization platforms such as Proxmox.
• Experience in the public sector or organizations subject to NIS2.

Culture & Benefits

• Work on complex, business-critical solutions for public-sector clients.
• Open-source-first environment with EU-based infrastructure.
• Collaborative workplace with professional freedom and opportunities to develop technical expertise.
• Knowledge sharing and transfer of maintainable security solutions to internal teams.