Responsibilities

• Assess the security and compliance landscape for SBOM, ensuring alignment with industry best practices and regulatory requirements
• Conduct in-depth evaluations of existing and emerging security tools, identifying optimal solutions for SBOM generation, vulnerability detection, and supply chain risk management
•  Architect, integrate, and optimize security solutions within CI/CD pipelines to ensure automation, efficiency, and minimal friction for engineering teams
• Lead training and mentoring sessions to promote the adoption of security tools, foster a security-first mindset, and establish long-term best practices
• Establish long-term security roadmaps, balancing business goals with compliance and risk mitigation needs

Requirements

• Proven track record in SecOps, DevSecOps, or Security Engineering, with a strong focus on software supply chain security and secure development practices
•  Deep understanding of SBOM frameworks (e.g., SPDX, CycloneDX) and their role in securing software dependencies and mitigating supply chain risks
•  Hands-on experience with security tooling, including SCA, SAST, container security, and CI/CD security automation
•  Ability to design and implement scalable security solutions, balancing risk mitigation with engineering efficiency
•  Strong problem-solving skills, with the ability to evaluate complex security challenges and define pragmatic, high-impact solutions

We offer

• Opportunity to work in a fast-paced, agile, software engineering culture
• Benefit program (5 weeks of vacation, 5 paid sick days, meal vouchers, cafeteria and recreation bonuses, reimbursement of glasses, contribution to pension fund)
• Referral bonuses for recommended candidates
• English language courses
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more