4 days ago
Prague, CzechiaMid Level
Responsibilities
- Harden GitHub Actions and Azure DevOps CI/CD pipelines with secure identity, dependency, branch, and environment controls.
- Implement build integrity and provenance controls, including artifact signing, SBOM generation, attestations, and SLSA-aligned practices.
- Integrate and tune software composition analysis, container image scanning, secrets detection, and infrastructure-as-code scanning.
- Secure artifact registries, package sources, third-party dependencies, open-source components, and AI artifacts against supply chain threats.
- Implement cloud security controls across AWS, Azure, and exposure to GCP, including identity, access, network, and posture controls.
- Secure Docker workloads and Kubernetes clusters through admission control, image verification, Pod Security Standards, and runtime hardening.
- Build security guardrails for hybrid, on-premises, multi-cluster, and serverless environments using GitOps and infrastructure-as-code.
- Automate security audits and remediation workflows for cloud posture, identity configurations, and network exposure.
- Support WAF, DDoS protection, secrets management, and identity federation services.
- Participate in threat modeling, vulnerability triage, incident response, documentation, runbook development, and secure-pattern creation.
Requirements
- At least 2 years of experience in DevOps, cloud engineering, platform engineering, or security engineering.
- At least 2 years of hands-on production experience with AWS or Azure services.
- Hands-on experience building or maintaining CI/CD pipelines and understanding how to secure them.
- Working knowledge of Docker, Kubernetes, and Helm.
- Experience with Terraform, Bicep/ARM templates, or CloudFormation.
- Proficiency in Python, Bash, or PowerShell.
- Understanding of IAM, RBAC, OAuth, OIDC, and workload identity concepts.
- Familiarity with dependency confusion, pipeline credential leakage, misconfigured storage, and over-privileged identity threats.
- Strong written and verbal communication skills in English.
- Preferred experience with SBOMs, vulnerability management, policy-as-code engines, cloud or security certifications, AI security, and the full SDLC.
- Preferred familiarity with Scrum and Kanban.
Benefits
- Flexible working schedule with no core hours.
- Learning and career growth opportunities.
- 25 days of paid time off, 3 sick days, and 2 days of paid volunteering leave per year.
- Hybrid work environment with a home-office allowance.
- Meal allowance, pension contribution, life and disability insurance, and paid sickness leave.
- Employee events including training sessions, hackathons, parties, sports events, board game gatherings, and barbecues.
- Team of experienced professionals and hybrid office environment.
Tech Stack
Categories
About Tricentis
Tricentis builds an AI-powered quality engineering platform for enterprises, spanning test automation, performance testing, and DevOps workflows (products include Tosca, qTest, and NeoLoad). It sells licenses and SaaS subscriptions to large organizations modernizing SAP, cloud, and custom apps, with customers such as T-Mobile and Allianz. Founded in 2007 and headquartered in Austin, Texas, the company is privately held.