Responsibilities

• Operate and maintain Open-Source security tools (Black Duck, Mend), ensuring smooth integration with internal development processes
• Develop and maintain automation layers (e.g., PR voting service, signature-scanning service) to streamline the consumption of Open-Source Security Information
• Manage and enhance piper steps related to security, ensuring that tools are integrated into CI/CD pipelines efficiently
• Facilitate communication and collaboration with external vendors to address security tool updates, licensing, and support issues
• Monitor and improve the performance and reliability of security tools and services
• Provide continuous support, troubleshooting, and guidance to engineering teams on security tool usage and configuration
• Ensure compliance with internal security standards and industry regulations

Requirements

• Strong background in managing and maintaining security tools, particularly open-source ones
• Proficiency in developing automation layers for security tool integration
• Experience in automating security processes within CI/CD pipelines
• Experience with containerization and orchestration tools (e.g., Docker, Kubernetes)
• Understanding of open-source security practices and compliance requirements
• Experience with scripting languages for automation (e.g., Python, Bash)
• Knowledge of industry security standards and regulations

We offer

• Opportunity to work in a fast-paced, agile, software engineering culture
• Benefit program (5 weeks of vacation, 5 paid sick days, meal vouchers, cafeteria and recreation bonuses, reimbursement of glasses, contribution to pension fund)
• Referral bonuses for recommended candidates
• English language courses
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more