DevOps Engineer (security)

Onapsis · Bucharest, Bucharest, Romaniamid

En corto

▸Ingeniero DevSecOps enfocado en seguridad dentro del ciclo de vida del software.
▸Automatización de pruebas de seguridad (SAST/DAST/SCA) y gestión de vulnerabilidades en pipelines CI/CD.
▸Destacado: Trabajas en una plataforma que protege aplicaciones críticas como SAP y Oracle de grandes empresas.

Proficiency in English required for collaboration with global teams.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓2+ años de experiencia en ciberseguridad con enfoque en Shift-Left
✓Conocimiento práctico en pruebas SAST, DAST, SCA y gestión de dependencias abiertas
✓Experiencia en modelado de amenazas y revisión de código seguro
✓Experiencia en DevOps con AWS, Git/GitLab y CI/CD
✓Conocimiento de contenedorización con Docker y Kubernetes
✓Familiaridad con estándares de cumplimiento como ISO 27001, NIST 800-53, PCI DSS

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GitLab CI/CDSASTDASTSCAAWSAzureGCPDockerKubernetesGrafana

¿A quién escribirle en Onapsis?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

About the job The world’s most critical--and at-risk--business applications have been neglected for far too long. Onapsis eliminates this blind spot by providing cybersecurity solutions dedicated to business-critical applications. Onapsis helps nearly 30% of the Forbes Global 100 understand the threats and risks across their SAP and Oracle landscapes, whether running on-premises, in the cloud, or in a hybrid environment. We are looking for self-motivated and enthusiastic DevSecOps Engineer who want to impact cybersecurity by continuing to advance, maintain, and enhance our platform features in Threat Detection & Response, Vulnerability Management, and Compliance Automation. What you will be doing, your legacy: Working closely with leadership, product management, and our Engineering and Operations teams to design and implement security-focused capabilities across the SDLC using Shift-Left-On-Security principles. This role partners with InfoSec, Technical Operations, and Platform Engineering teams to ensure CI/CD frameworks, infrastructure, and automation tooling are secure by design, resilient, and capable of protecting our customers at scale. Key Responsibilities: • Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (SAST, DAST, SCA) directly into GitLab CI/CD pipelines. • Vulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities. • Security Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards. • Penetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities. • Security Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry. • Security Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams. • Threat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production. Requirements: Cybersecurity Expertise (2+ Years) • Hands-on experience implementing Shift-Left-On-Security frameworks within the SDLC. • Practical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management. • Experience conducting Threat Modeling exercises and performing secure code reviews. • Awareness of penetration testing (blackbox, whitebox) methods • Plus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience. DevOps & Cloud Infrastructure (1+ Years) • Proven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP) • Good understanding of the Software Development Lifecycle ( SDLC ), its phases and how to embed Security in each of them • Experience in Version Control tools and CI/CD ( Git/GitLab) , including branching, and pipeline development. • Knowledge of containerization and orchestration using Docker and Kub

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.