DevSecOps Specialist (f/m/x)

Join our Group Information & Cyber Security Department and play a pivotal role in protecting RBI Group’s digital assets. We’re looking for a dedicated professional interested in areas such as Secure Software Development, Vulnerability Management and Security Compliance Monitoring. You will integrate, operate and manage solutions across SaaS, PaaS, IaaS, and on-premises systems to ensure robust security for our hybrid infrastructure. Your work will also involve automating security processes and defining proactive measures to enhance our security posture.

 Your mission at RBI:

• Operate and refine automation procedures on our AWS CDK-based infrastructure and related tools
• Troubleshoot issues and implement corrective measures
• Support internal stakeholders in integrating security solutions according to our standards
• Coordinate with vendors to improve existing security solutions
• Perform daily administrative tasks, reporting, and inter-departmental communication
• Support in steering or operating vulnerability management tools and overall topics
• Advocate for DevSecOps principles and collaborate with development teams to ensure compliance with RBI bylaws
• Support integrating and evaluating security solutions (SAST, SCA, DAST/IAST) into the CI/CD pipeline for automated testing and benchmark existing solutions
• Gather feedback from IT teams and address operational issues with internal or external stakeholders

Your core competencies:

• Master’s degree in Security/Engineering, Computer Science, or equivalent practical experience
• High level of personal integrity, ability to handle confidential matters professionally, and appropriate judgment and maturity
• Knowledge of secure software development practices
• Experience as DevOps with relevant coding skills
• Proficiency in higher scripting languages (e.g., Python, PowerShell)
• Good understanding of the OSI model and TCP/IP protocol suite (TCP, UDP, SSL/TLS, DNS, HTTP/HTTPS)
• Understanding of web authentication protocols (OAuth 2, SAML, OpenID) and data formats (JSON, SOAP, XML)
• Hands-on experience with proxies and web servers
• Experience or willingness to learn AWS CDK
• Excellent written and spoken English; German is an asset
• Vendor-independent security certifications (e.g., CEH, CISSP, CISM) are strongly preferred
• Familiarity with GitHub Actions is an asset
• Experience in a large international banking environment is an asset

What's in it for you:

• Work Life Balance: flexible working hours (no core time), extensive hybrid working options / work from home, 30 days / year remote work from any EU-country outside Austria
• Easy Moving: work permit support
• Top-notch Equipment: modern tools & technologies
• International Spirit: multi-cultural teams, English as company language, team building events
• Learning & Agile Working: as part of our DNA & culture 
• Canteen: healthy, tasty, and heavily subsidized
• Saving: with vouchers / discounts from our staffs' council (eg. supermarket)
• Further Goodies: free public transport pass, salary account & credit card (optional), reduced gym membership, gender-neutral parental leave, bilingual company kindergarten, child care during holidays etc. 
• Salary: the offered gross yearly salary starts at EUR 65.000,- (basis full-time) excluding overtime, depending on qualification and experience.)

Bei Fragen bezüglich unseres Bewerbungsprozesses, wirf gerne einen Blick auf unsere Website oder unsere FAQ.   Ihr Kontakt: Nathalie Pollroß Talent Acquisition Team