Назад до пошукуSenior/Lead SecOps Engineer
Віддалений* формат співпраці з території - Україна
*Ви можете працювати віддалено з території країни (або країн), для яких відкрита ця позиція.
Security.Engineering& інші навички
We are seeking a Senior/Lead SecOps Engineer with strong expertise in software supply chain security to enhance our security posture around Software Bill of Materials and related tooling. This 4-6 month engagement focuses on defining security requirements, evaluating and implementing solutions, and enabling the engineering team through best practices and training.
Чим ви будете займатися у цій ролі
- Assess the security and compliance landscape for SBOM, ensuring alignment with industry best practices and regulatory requirements
- Conduct in-depth assessments of existing and emerging security tools, identifying optimal solutions for SBOM generation, vulnerability detection, and supply chain risk management
- Define security requirements and strategy for SBOM-related tooling and processes
- Architect, integrate, and optimize security solutions within CI/CD pipelines, ensuring automation and efficiency
- Minimize friction for engineering teams while implementing supply chain security solutions
- Lead training and mentoring sessions to drive adoption of security tools
- Cultivate a security-first mindset across the engineering organization
- Establish long-term best practices for software supply chain security
Навички
- 3+ years of experience in SecOps, DevSecOps, or Security Engineering, with a strong focus on software supply chain security and secure development practices
- Understanding of SBOM frameworks such as SPDX and CycloneDX and their role in securing software dependencies and mitigating supply chain risks
- Hands-on experience with security tooling, including SCA, SAST, and container security
- Expertise in CI/CD security automation
- Capability to design and implement scalable security solutions, balancing risk mitigation with engineering efficiency
- Strong problem-solving skills, with the ability to evaluate complex security challenges and define pragmatic, high-impact solutions
- English proficiency at B2 level or higher