Overview

Eykon Private Limited , formerly part of the Landis+Gyr Group, supports electricity, gas, water and thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

Responsibilities

• Design, implement, and maintain automated security pipelines for static and dynamic analysis, SBOM generation, and open-source risk detection.
• Validate tooling effectiveness by measuring coverage, accuracy, and false-positive rates across diverse codebases (embedded, backend, cloud).
• Integrate DevSecOps practices into R&D CI/CD environments so every build and release is automatically security-checked.
• Partner with Software Architects and QA to define security gate criteria for development and release readiness.
• Build and maintain automation scripts, dashboards, and metrics to track security assurance results across product lines.
• Enable development teams to use automated tools effectively and to interpret and remediate scan findings.
• Coordinate with Governance & Certification to produce audit-ready security evidence (e.g., EU Cyber Resilience Act (CRA) and/or IEC 62443).
• Evaluate, onboard, and continuously improve security tools to increase the efficiency and impact of the Product & Portfolio Security team.

Qualifications

• 10 years of experience in security with 5 years in DevSecOps, software security automation, or CI/CD integration.
• Hands-on experience with SAST, DAST, SCA, SBOM, and OSS risk tools.
• Strong programming or scripting skills (Python, Bash, or PowerShell).
• Familiarity with CI/CD platforms such as GitLab (or equivalent).
• Proven ability to balance automation, security effectiveness, and developer usability.
• Familiarity with metrics-driven continuous improvement of security pipelines.
• Internal: Software Development, QA, Governance & Certification, Cloud Operations, and Security Architecture.
• External: Tool vendors, auditors, and DevSecOps community partners.
• Automated security testing is integrated into CI/CD pipelines across targeted product lines.
• Reduced manual security testing effort and faster developer feedback cycles.
• Effective use of AI to accelerate tooling development and developer support.
• High-quality scan results with low false-positive rates and high coverage.
• Improved secure coding practices and consistent audit readiness (e.g., evidence available on demand).

Nice to have

• Degree in Software Engineering, Computer Science, or Cybersecurity.
• Certification in DevSecOps or cloud security (e.g., CSSLP or DevSecOps Foundation).