Eykon Private Limited, formerly part of the Landis+Gyr Group, supports electricity, gas, water and thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

 
With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company provides advanced metering, network intelligence and digital solutions to utilities and infrastructure operators primarily across Europe, Middle East and Africa. As a standalone organisation, Eykon Private Limited builds on long-standing customer relationships and proven technology capabilities, backed by experienced regional teams.

Role Purpose

The Security Automation Engineer designs, builds, and continuously improves automated security testing and assurance pipelines integrated into the company’s CI/CD workflows, as well as supporting security tooling. The role ensures that security controls and processes—including SAST, DAST, SCA/SBOM, and open-source risk management—are effective, efficient, and scalable, enabling continuous security validation throughout the software development lifecycle.

Key Responsibilities

• Design, implement, and maintain automated security pipelines for static and dynamic analysis, SBOM generation, and open-source risk detection.
• Validate tooling effectiveness by measuring coverage, accuracy, and false-positive rates across diverse codebases (embedded, backend, cloud).
• Integrate DevSecOps practices into R&D CI/CD environments so every build and release is automatically security-checked.
• Partner with Software Architects and QA to define security gate criteria for development and release readiness.
• Build and maintain automation scripts, dashboards, and metrics to track security assurance results across product lines.
• Enable development teams to use automated tools effectively and to interpret and remediate scan findings.
• Coordinate with Governance & Certification to produce audit-ready security evidence (e.g., EU Cyber Resilience Act (CRA) and/or IEC 62443).
• Evaluate, onboard, and continuously improve security tools to increase the efficiency and impact of the Product & Portfolio Security team.

Required Skills & Experience

• 10 years of experience in security with 5 years in DevSecOps, software security automation, or CI/CD integration.
• Hands-on experience with SAST, DAST, SCA, SBOM, and OSS risk tools.
• Strong programming or scripting skills (Python, Bash, or PowerShell).
• Experience using AI-assisted development tools (e.g., Claude Code).
• Familiarity with CI/CD platforms such as GitLab (or equivalent).
• Proven ability to balance automation, security effectiveness, and developer usability.

Preferred Qualifications

• Degree in Software Engineering, Computer Science, or Cybersecurity.
• Certification in DevSecOps or cloud security (e.g., CSSLP or DevSecOps Foundation).
• Experience deploying tools in containerized or cloud-native environments.
• Familiarity with metrics-driven continuous improvement of security pipelines.

Key Interfaces

• Internal: Software Development, QA, Governance & Certification, Cloud Operations, and Security Architecture.
• External: Tool vendors, auditors, and DevSecOps community partners.

Success Indicators

• Automated security testing is integrated into CI/CD pipelines across targeted product lines.
• Reduced manual security testing effort and faster developer feedback cycles.
• Effective use of AI to accelerate tooling development and developer support.
• High-quality scan results with low false-positive rates and high coverage.
• Improved secure coding practices and consistent audit readiness (e.g., evidence available on demand).

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background. We're committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.