DevOps Engineer (security)

Onapsis · Bucharest, Bucharest, Romaniasenior

En corto

▸Ingeniero DevSecOps enfocado en seguridad del ciclo de vida del software.
▸Integras pruebas de seguridad en CI/CD, gestionas vulnerabilidades y apoyas auditorías y pruebas de penetración.
▸Destaca por trabajar con tecnologías como GitLab CI, Kubernetes y herramientas avanzadas de SAST/SCA/SAST en entornos cloud.

Fluent English required for collaboration with global teams.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓2+ años de experiencia en ciberseguridad y prácticas de seguridad en el ciclo de vida del software.
✓4+ años de experiencia en DevOps con nubes (AWS preferido).
✓Experiencia práctica con SAST, DAST, SCA y gestión de dependencias de software.
✓Capacidad para realizar modelado de amenazas y revisiones de código seguro.
✓Conocimiento en CI/CD seguro y pipelines con GitLab.
✓Habilidades de colaboración con equipos de ingeniería y seguridad.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GitLab CI/CDAWSKubernetesSASTDASTSCAOSSContainer SecurityGrafanaNew Relic

¿A quién escribirle en Onapsis?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

About the job: Onapsis is on a mission to safeguard the most critical business applications that business depends on daily. Over 20% of the Fortune 100 rely on Onapsis to secure their business-critical applications and ensure they are compliant and available. We are looking for self-motivated and enthusiastic DevSecOps Engineers who want to impact cybersecurity by continuing to advance, maintain, and enhance our platform features in Threat Detection & Response, Vulnerability Management, and Compliance Automation. What you will be doing: Working closely with leadership, product management, and our Engineering and Operations teams to design and implement security-focused capabilities across the SDLC using Shift-Left-On-Security principles. This role partners with InfoSec, Technical Operations, and Platform Engineering teams to ensure CI/CD frameworks, infrastructure, and automation tooling are secure by design, resilient, and capable of protecting our customers at scale. Key Responsibilities: • Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (OSS, SAST, DAST, SCA, Container Security and related K8s configuration management) directly into GitLab CI/CD pipelines. • Vulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities. • Security Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards. • Penetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities. • Security Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry. • Security Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams. • Threat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production. • Support our Engineering teams: Provide in-depth knowledge of the DevSecOPS principles and tools to our engineering teams. Understand their SDLC challenges and provide automation solutions to improve our delivery lifecycle. Provide support with the self servicing shift left on security CICD tools and pipelines if problems arise. What you’ll bring: Cybersecurity Expertise (2+ Years) • Hands-on experience implementing Shift-Left-On-Security frameworks within the SDLC. • Practical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management. • Experience conducting Threat Modeling exercises and performing secure code reviews. • Awareness of penetration testing (blackbox, whitebox) methods • Plus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience. DevOps & Cloud Infrastructure (4+ Years) • Proven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP) • Advanced problem solving skills and distributed systems engineering concepts. • Advanced knowledge o

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.