DevOps Engineer
DevOps Engineer (security)
Bucharestfulltime
Откликнуться на сайте работодателяОписание вакансии
New
DevOps Engineer (security)
Bucharest, Bucharest, Romania
About The Job:
Onapsis is on a mission to safeguard the most critical business applications that business depends on daily. Over 20% of the Fortune 100 rely on Onapsis to secure their business-critical applications and ensure they are compliant and available.
We are looking for self-motivated and enthusiastic DevSecOps Engineers who want to impact cybersecurity by continuing to advance, maintain, and enhance our platform features in Threat Detection & Response, Vulnerability Management, and Compliance Automation.
What You Will Be Doing:
Working closely with leadership, product management, and our Engineering and Operations teams to design and implement security-focused capabilities across the SDLC using Shift-Left-On-Security principles.
This role partners with InfoSec, Technical Operations, and Platform Engineering teams to ensure CI/CD frameworks, infrastructure, and automation tooling are secure by design, resilient, and capable of protecting our customers at scale.
Key Responsibilities:
- Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (OSS, SAST, DAST, SCA, Container Security and related K8s configuration management) directly into GitLab CI/CD pipelines.
- Vulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities.
- Security Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards.
- Penetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities.
- Security Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry.
- Security Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams.
- Threat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production.
- Support our Engineering teams: Provide in-depth knowledge of the DevSecOPS principles and tools to our engineering teams. Understand their SDLC challenges and provide automation solutions to improve our delivery lifecycle. Provide support with the self servicing shift left on security CICD tools and pipelines if problems arise.
What You’ll Bring:
Cybersecurity Expertise (2+ Years)
- Hands-on experience implementing Shift-Left-On-Security frameworks within the SDLC.
- Practical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management.
- Experience conducting Threat Modeling exercises and performing secure code reviews.
- Awareness of penetration testing (blackbox, whitebox) methods
- Plus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience.
DevOps & Cloud Infrastructure (4+ Years)
- Proven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP)
- Advanced problem solving skills and distributed systems engineering concepts.
- Advanced knowledge of the Software Development Lifecycle (SDLC), its phases and how to enable the shift left on security paradigm in each
- Advanced knowledge in Source Control Management and CICD tools (Git/GitLab), including branching/versioning strategies, and pipeline development.
- Intermediate knowledge of container infrastructure and related container orchestration platforms (Docker and Kubernetes).
- Advanced knowledge in cloud computing administration skills and related best practices(AWS)
- Advanced Application Performance Management and Observability skills for in depth troubleshooting
- Intermediate Infrastructure as a Code and Configuration management skills using Terraform
- Linux system administration skills, including networking, access management, and basic troubleshooting skills.
- Advanced knowledge in a scripting language (e.g., Python, Bash).
Soft Skills
- Demonstrated effective communication and collaboration across Engineering, Security, SRE, and cross-functional teams to support delivery and operational objectives
- Experience managing priorities, handling operational pressure, and escalating risks or blockers when needed. Identifies and supports continuous improvement initiatives.
- Demonstrated analytical thinking and problem-solving skills to troubleshoot operational, infrastructure, and security-related issues in a structured manner
- Strong attention to detail and a security-first mindset when working with CICD pipelines, infrastructure, automation, and cloud environments
- Continuous learning mindset with willingness to share knowledge, contribute to documentation, and support team growth
What We Offer:
- A role in shaping the future of protecting the most critical applications that run the world's business and a career that grows as the company grows.
- A unique culture of high achievement and teamwork.
- Supportive and humble colleagues are the space's top problem solvers and innovators.
- Financial security through competitive compensation and incentives.
Employment:
Please note that this is a full-time employee role. No B2B or SRLs will be accommodated.
Location
: Onapsis has established a new development center in Bucharest 3 years ago. This is a hybrid role (2 days per week from the office), so candidates must be commutable to Bucharest at our office in One Park Cotroceni.
About Onapsis:
Onapsis protects the business applications that run the global economy. The Onapsis Platform delivers vulnerability management, change assurance, and continuous compliance for business applications from leading vendors such as SAP, Oracle, and others. The Onapsis Platform is powered by the Onapsis Research Labs, the team responsible for the discovery and mitigation of more than 1,000 zero-day vulnerabilities in business applications.
Onapsis is headquartered in Boston, MA, with offices in Dallas, TX, Heidelberg, Germany, Bucharest, Romania, and Buenos Aires, Argentina, and proudly serves hundreds of the world’s leading brands, including close to 30% of the Forbes Global 100, six of the top 10 automotive companies, five of the top 10 chemical companies, four of the top 10 technology companies, and three of the top 10 oil and gas companies.
Onapsis only invites candidates to apply directly through reputable job boards or the Onapsis careers page on our website. Job offers are extended only after a face-to-face video interview with an Onapsis HR representative. Please disregard any outreach from Onapsis via forums, social networks, or other platforms, as these are fraudulent.
For more information, connect with Onapsis on LinkedIn or visit https://www.onapsis.com.
#Hybrid
Create a Job Alert
Interested in building your career at Onapsis? Get future opportunities sent straight to your email.
Create alert
Apply for this job
indicates a required field
First Name*
Last Name*
Email*
Phone
Country*
Phone*
244 results found
No results found
- Afghanistan+93
- Åland Islands+358
- Albania+355
- Algeria+213
- American Samoa+1
- Andorra+376
- Angola+244
- Anguilla+1
- Antigua & Barbuda+1
- Argentina+54
- Armenia+374
- Aruba+297
- Ascension Island+247
- Australia+61
- Austria+43
- Azerbaijan+994
- Bahamas+1
- Bahrain+973
- Bangladesh+880
- Barbados+1
- Belarus+375
- Belgium+32
- Belize+501
- Benin+229
- Bermuda+1
- Bhutan+975
- Bolivia+591
- Bosnia & Herzegovina+387
- Botswana+267
- Brazil+55
- British Indian Ocean Territory+246
- British Virgin Islands+1
- Brunei+673
- Bulgaria+359
- Burkina Faso+226
- Burundi+257
- Cambodia+855
- Cameroon+237
- Canada+1
- Cape Verde+238
- Caribbean Netherlands+599
- Cayman Islands+1
- Central African Republic+236
- Chad+235
- Chile+56
- China+86
- Christmas Island+61
- Cocos (Keeling) Islands+61
- Colombia+57
- Comoros+269
- Congo - Brazzaville+242
- Congo - Kinshasa+243
- Cook Islands+682
- Costa Rica+506
- Côte d’Ivoire+225
- Croatia+385
- Cuba+53
- Curaçao+599
- Cyprus+357
- Czechia+420
- Denmark+45
- Djibouti+253
- Dominica+1
- Dominican Republic+1
- Ecuador+593
- Egypt+20
- El Salvador+503
- Equatorial Guinea+240
- Eritrea+291
- Estonia+372
- Eswatini+268
- Ethiopia+251
- Falkland Islands+500
- Faroe Islands+298
- Fiji+679
- Finland+358
- France+33
- French Guiana+594
- French Polynesia+689
- Gabon+241
- Gambia+220
- Georgia+995
- Germany+49
- Ghana+233
- Gibraltar+350
- Greece+30
- Greenland+299
- Grenada+1
- Guadeloupe+590
- Guam+1
- Guatemala+502
- Guernsey+44
- Guinea+224
- Guinea-Bissau+245
- Guyana+592
- Haiti+509
- Honduras+504
- Hong Kong SAR China+852
- Hungary+36
- Iceland+354
- India+91
- Indonesia+62
- Iran+98
- Iraq+964
- Ireland+353
- Isle of Man+44
- Israel+972
- Italy+39
- Jamaica+1
- Japan+81
- Jersey+44
- Jordan+962
- Kazakhstan+7
- Kenya+254
- Kiribati+686
- Kosovo+383
- Kuwait+965
- Kyrgyzstan+996
- Laos+856
- Latvia+371
- Lebanon+961
- Lesotho+266
- Liberia+231
- Libya+218
- Liechtenstein+423
- Lithuania+370
- Luxembourg+352
- Macao SAR China+853
- Madagascar+261
- Malawi+265
- Malaysia+60
- Maldives+960
- Mali+223
- Malta+356
- Marshall Islands+692
- Martinique+596
- Mauritania+222
- Mauritius+230
- Mayotte+262
- Mexico+52
- Micronesia+691
- Moldova+373
- Monaco+377
- Mongolia+976
- Montenegro+382
- Montserrat+1
- Morocco+212
- Mozambique+258
- Myanmar (Burma)+95
- Namibia+264
- Nauru+674
- Nepal+977
- Netherlands+31
- New Caledonia+687
- New Zealand+64
- Nicaragua+505
- Niger+227
- Nigeria+234
- Niue+683
- Norfolk Island+672
- North Korea+850
- North Macedonia+389
- Northern Mariana Islands+1
- Norway+47
- Oman+968
- Pakistan+92
- Palau+680
- Palestinian Territories+970
- Panama+507
- Papua New Guinea+675
- Paraguay+595
- Peru+51
- Philippines+63
- Poland+48
- Portugal+351
- Puerto Rico+1
- Qatar+974
- Réunion+262
- Romania+40
- Russia+7
- Rwanda+250
- Samoa+685
- San Marino+378
- São Tomé & Príncipe+239
- Saudi Arabia+966
- Senegal+221
- Serbia+381
- Seychelles+248
- Sierra Leone+232
- Singapore+65
- Sint Maarten+1
- Slovakia+421
- Slovenia+386
- Solomon Islands+677
- Somalia+252
- South Africa+27
- South Korea+82
- South Sudan+211
- Spain+34
- Sri Lanka+94
- St. Barthélemy+590
- St. Helena+290
- St. Kitts & Nevis+1
- St. Lucia+1
- St. Martin+590
- St. Pierre & Miquelon+508
- St. Vincent & Grenadines+1
- Sudan+249
- Suriname+597
- Svalbard & Jan Mayen+47
- Sweden+46
- Switzerland+41
- Syria+963
- Taiwan+886
- Tajikistan+992
- Tanzania+255
- Thailand+66
- Timor-Leste+670
- Togo+228
- Tokelau+690
- Tonga+676
- Trinidad & Tobago+1
- Tunisia+216
- Turkey+90
- Turkmenistan+993
- Turks & Caicos Islands+1
- Tuvalu+688
- U.S. Virgin Islands+1
- Uganda+256
- Ukraine+380
- United Arab Emirates+971
- United Kingdom+44
- United States+1
- Uruguay+598
- Uzbekistan+998
- Vanuatu+678
- Vatican City+39
- Venezuela+58
- Vietnam+84
- Wallis & Futuna+681
- Western Sahara+212
- Yemen+967
- Zambia+260
- Zimbabwe+263
Location (City)*
Resume/CV*
Attach
Enter manually
Accepted file types: pdf, doc, docx, txt, rtf
Education
School
Select...
Degree
Select...
Discipline
Select...
Start date month
Select...
Start date year
End date month
Select...
End date year
Are you legally authorized to work in Romania? *
Select...
Will you now or will you in the future require work visa sponsorship for employment in Romania? *
Select...
Do you reside within commutable distance to Bucharest?*
Select...
LinkedIn Profile*
Onapsis, Inc. (“Onapsis”, “We” or “us”), respects your privacy and is committed to protecting it through our compliance with our Privacy Policy, a copy of which can be found at https://onapsis.com/privacy\-policy (the “Policy”) . This Policy is designed to describe to you the basis for the processing of the personal data we collect from you, or that is provided by you as part of our recruitment process. Onapsis engages with Greenhouse, a web-based hiring platform, as Sub-processor to assist in our recruiting process. As part of that process, Greenhouse will be collecting and processing the personal data you have shared. See Greenhouse’s Privacy Policy. When you apply for a job posted by Onapsis and you provide us with your personal data, we and our Sub-processor will use that for the purposes of determining whether or not you’re a good fit for current and future roles at Onapsis. Onapsis and our Sub-processor will keep your personal data for up to 12 months or for as long as required pursuant to applicable legal and/or regulatory requirements. If it turns out we’d like to keep it around longer, we’ll reach out to you to extend the consent.
Select...
GDPR and Privacy Applicant Consent Form
I understand that the role to which I'm applying is for a full-time employee position with Onapsis Romania, SRL, and I acknowledge that Onapsis Romania does not entertain B2B or sole-proprietor SRL relationships for employment in this role.*
Select...
Key Responsibilities:
- Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (OSS, SAST, DAST, SCA, Container Security and related K8s configuration management) directly into GitLab CI/CD pipelines.
- Vulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities.
- Security Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards.
- Penetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities.
- Security Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry.
- Security Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams.
- Threat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production.
- Support our Engineering teams: Provide in-depth knowledge of the DevSecOPS principles and tools to our engineering teams. Understand their SDLC challenges and provide automation solutions to improve our delivery lifecycle. Provide support with the self servicing shift left on security CICD tools and pipelines if problems arise.
What You’ll Bring:
Cybersecurity Expertise (2+ Years)
- Hands-on experience implementing Shift-Left-On-Security frameworks within the SDLC.
- Practical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management.
- Experience conducting Threat Modeling exercises and performing secure code reviews.
- Awareness of penetration testing (blackbox, whitebox) methods
- Plus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience.
DevOps & Cloud Infrastructure (4+ Years)
- Proven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP)
- Advanced problem solving skills and distributed systems engineering concepts.
- Advanced knowledge of the Software Development Lifecycle (SDLC), its phases and how to enable the shift left on security paradigm in each
- Advanced knowledge in Source Control Management and CICD tools (Git/GitLab), including branching/versioning strategies, and pipeline development.
- Intermediate knowledge of container infrastructure and related container orchestration platforms (Docker and Kubernetes).
- Advanced knowledge in cloud computing administration skills and related best practices(AWS)
- Advanced Application Performance Management and Observability skills for in depth troubleshooting
- Intermediate Infrastructure as a Code and Configuration management skills using Terraform
- Linux system administration skills, including networking, access management, and basic troubleshooting skills.
- Advanced knowledge in a scripting language (e.g., Python, Bash).
Soft Skills
- Demonstrated effective communication and collaboration across Engineering, Security, SRE, and cross-functional teams to support delivery and operational objectives
- Experience managing priorities, handling operational pressure, and escalating risks or blockers when needed. Identifies and supports continuous improvement initiatives.
- Demonstrated analytical thinking and problem-solving skills to troubleshoot operational, infrastructure, and security-related issues in a structured manner
- Strong attention to detail and a security-first mindset when working with CICD pipelines, infrastructure, automation, and cloud environments
- Continuous learning mindset with willingness to share knowledge, contribute to documentation, and support team growth
What We Offer:
- A role in shaping the future of protecting the most critical applications that run the world's business and a career that grows as the company grows.
- A unique culture of high achievement and teamwork.
- Supportive and humble colleagues are the space's top problem solvers and innovators.
- Financial security through competitive compensation and incentives.
Employment:
Please note that this is a full-time employee role. No B2B or SRLs will be accommodated.
Location
: Onapsis has established a new development center in Bucharest 3 years ago. This is a hybrid role (2 days per week from the office), so candidates must be commutable to Bucharest at our office in One Park Cotroceni.
About Onapsis:
Onapsis protects the business applications that run the global economy. The Onapsis Platform delivers vulnerability management, change assurance, and continuous compliance for business applications from leading vendors such as SAP, Oracle, and others. The Onapsis Platform is powered by the Onapsis Research Labs, the team responsible for the discovery and mitigation of more than 1,000 zero-day vulnerabilities in business applications.
Onapsis is headquartered in Boston, MA, with offices in Dallas, TX, Heidelberg, Germany, Bucharest, Romania, and Buenos Aires, Argentina, and proudly serves hundreds of the world’s leading brands, including close to 30% of the Forbes Global 100, six of the top 10 automotive companies, five of the top 10 chemical companies, four of the top 10 technology companies, and three of the top 10 oil and gas companies.
Onapsis only invites candidates to apply directly through reputable job boards or the Onapsis careers page on our website. Job offers are extended only after a face-to-face video interview with an Onapsis HR representative. Please disregard any outreach from Onapsis via forums, social networks, or other platforms, as these are fraudulent.
For more information, connect with Onapsis on LinkedIn or visit https://www.onapsis.com.
#Hybrid
GDPR and Privacy Applicant Consent Form
Это сохранённая копия объявления, опубликованного в другом месте. Вакансии снимают без предупреждения — перед откликом проверьте сайт работодателя. mentors.coach не является нанимающей стороной.