We are seeking a skilled DevSecOps Engineer to join our team and focus on managing and maintaining open-source security tools.

#LI-DNI

Responsibilities

• Operate and maintain Open-Source security tools (Black Duck, Mend), ensuring smooth integration with internal development processes
• Develop and maintain automation layers (e.g., PR voting service, signature-scanning service) to streamline the consumption of Open-Source Security Information
• Manage and enhance piper steps related to security, ensuring that tools are integrated into CI/CD pipelines efficiently
• Facilitate communication and collaboration with external vendors to address security tool updates, licensing, and support issues
• Monitor and improve the performance and reliability of security tools and services
• Provide continuous support, troubleshooting, and guidance to engineering teams on security tool usage and configuration
• Ensure compliance with internal security standards and industry regulations

• Strong background in managing and maintaining security tools, particularly open-source ones
• Proficiency in developing automation layers for security tool integration
• Experience in automating security processes within CI/CD pipelines
• Experience with containerization and orchestration tools (e.g., Docker, Kubernetes)
• Understanding of open-source security practices and compliance requirements
• Experience with scripting languages for automation (e.g., Python, Bash)
• Knowledge of industry security standards and regulations

• Opportunity to work in a fast-paced, agile, software engineering culture
• Comfortable modern office in Prague 7, with support of hybrid or fully remote mode
• Benefit program (5 weeks of vacation, paid sick days, paid days off for special occasions, meal vouchers, flexi pass, Prague city public transport annual coupon, multisport cards, optional contribution to pension fund, health insurance for family member)
• EPAM Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements)
• English language courses
• Czech language courses upon request
• Referral bonuses for recommended candidates
• Mobile Phone Tariff's program for managerial-level candidates
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more