We are seeking a skilled DevSecOps Engineer to join our team, focusing on managing and maintaining Open-Source security tools such as Black Duck and Mend. The role involves developing automation layers to enhance security tool integration and facilitating communication between internal teams and external vendors. The ideal candidate will have a strong background in security operations and a passion for automating security processes within CI/CD pipelines.

#LI-DNI

Responsibilities

• Operate and maintain Open-Source security tools, ensuring smooth integration with development processes
• Develop and maintain automation layers (e.g., PR voting service, signature-scanning service) to streamline the consumption of Open-Source Security Information
• Manage and enhance piper steps related to security, ensuring that tools are integrated into CI/CD pipelines efficiently
• Facilitate communication and collaboration with external vendors to address security tool updates, licensing, and support issues
• Collaborate closely with development teams to ensure seamless use of security tools and alignment with security best practices
• Monitor and improve the performance and reliability of security tools and services
• Provide continuous support, troubleshooting, and guidance to engineering teams on security tool usage and configuration
• Ensure compliance with internal security standards and industry regulations

• Strong practical background in security engineering and operations
• Experience with security tools such as Black Duck, Mend
• Experience with automation of security processes within CI/CD pipelines, Hands-on experience with CI/CD tools
• Scripting experience (Python, bash, etc.)
• Cloud/DevOps Certification (MS Azure/AWS/GCP) will be considered an advantage

• Opportunity to work in a fast-paced, agile, software engineering culture
• Comfortable modern office in Prague 7, with support of hybrid or fully remote mode
• Benefit program (5 weeks of vacation, paid sick days, paid days off for special occasions, meal vouchers, flexi pass, Prague city public transport annual coupon, multisport cards, optional contribution to pension fund, health insurance for family member)
• EPAM Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements)
• English language courses
• Czech language courses upon request
• Referral bonuses for recommended candidates
• Mobile Phone Tariff's program for managerial-level candidates
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more