3 months ago
Bucharest, RomaniaMid Level
Responsibilities
- Embed and optimize automated security testing, including SAST, DAST, SCA, OSS management, and container security, in GitLab CI/CD pipelines.
- Perform platform security assessments, verify exploits, and support vulnerability remediation and patch management.
- Participate in security audits, compliance reporting, and coordination with engineering teams on regulatory requirements.
- Provision isolated environments and deploy application builds to enable penetration testing.
- Support security releases, monitoring, observability, and incident-response activities using Grafana, New Relic, or OpenTelemetry.
- Conduct threat modeling, secure code reviews, internal security training, and security advocacy across engineering teams.
- Provide DevSecOps guidance and automation support for engineering teams and their shift-left security pipelines.
Requirements
- At least 2 years of hands-on cybersecurity experience implementing shift-left security frameworks.
- At least 4 years of DevOps and cloud infrastructure experience, preferably with AWS and also including Azure or GCP.
- Practical knowledge of SAST, DAST, SCA, OSS management, threat modeling, secure code reviews, and penetration-testing methods.
- Advanced knowledge of SDLC practices, Git/GitLab source control and CI/CD pipeline development, cloud administration, and observability.
- Intermediate experience with Docker, Kubernetes, Terraform, and configuration management.
- Linux systems administration experience covering networking, access management, and troubleshooting.
- Advanced scripting experience in Python or Bash.
- Preferred knowledge of ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls, or security operations experience.
- Strong communication, collaboration, analytical problem-solving, prioritization, and security-first skills.
Benefits
- Full-time employee role with competitive compensation and incentives.
- Hybrid work arrangement requiring two days per week in the Bucharest office at One Park Cotroceni.
- Career growth within a company focused on protecting critical business applications.
- Collaborative culture with supportive colleagues and opportunities to share knowledge and contribute to team growth.
Tech Stack
About Onapsis
Onapsis builds security and compliance software for business‑critical ERP applications, with a focus on SAP and Oracle E‑Business Suite. Its platform provides automated compliance, vulnerability management, threat detection, and secure-change governance for cloud and hybrid SAP landscapes. Founded in 2009 and headquartered in Boston, the privately held company reports serving 300+ enterprises, including many Global 2000, and maintains regional offices in Germany, Argentina, and Romania.