Lead Devsecops Engineer (Remote)

We are seeking a skilled Lead DevSecOps Engineer to join our team, focusing on managing and maintaining open-source security tools such as Black Duck and Mend. The role involves developing automation layers to enhance security tool integration and facilitating communication between internal teams and external vendors. The ideal candidate will have a strong background in security operations and a passion for automating security processes within CI/CD pipelines.

Responsibilities

• Manage and maintain open-source security tools (Black Duck, Mend), ensuring smooth integration with SAP development processes
• Monitor and improve the performance and reliability of security tools and services
• Ensure compliance with internal security standards and industry regulations
• Develop and maintain automation layers (e.g., PR voting service, signature-scanning service) to streamline the consumption of open-source security information
• Manage and enhance piper steps related to security, ensuring efficient integration into CI/CD pipelines
• Facilitate communication and collaboration with external vendors to address security tool updates, licensing, and support issues
• Collaborate closely with SAP development teams to ensure seamless use of security tools and alignment with security best practices
• Provide continuous support, troubleshooting, and guidance to engineering teams on security tool usage and configuration

Requirements

• Strong background in managing and maintaining security tools, particularly open-source tools like Black Duck and Mend
• Experience in automating security processes within CI/CD pipelines
• Proficiency in developing automation layers for security tool integration
• Familiarity with CI/CD tools and practices
• Understanding of SAP development processes
• Excellent communication and interpersonal skills to facilitate collaboration between internal teams and external vendors
• Strong analytical and troubleshooting skills to monitor and improve tool performance and reliability

Nice to have

• Experience with scripting languages for automation (e.g., Python, Bash)
• Knowledge of industry security standards and regulations
• Familiarity with containerization and orchestration tools (e.g., Docker, Kubernetes)
• Understanding of open-source security practices and compliance requirements

We offer

• We gather like-minded people:

• Engineering community of industry professionals
• Friendly team and enjoyable working environment
• Flexible schedule and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Relocation within our 50+ offices

We provide growth opportunities:

• Outstanding career roadmap
• Leadership development, career advising, soft skills, and well-being programs
• Certification (GCP, Azure, AWS)
• Unlimited access to LinkedIn Learning, Get Abstract, O’Reilly, Cloud Guru
• Language classes in English and Polish for foreigners

We cover it all:

• Stable income (Employment Contract or B2B)
• Participation in the Employee Stock Purchase Plan
• Benefits package (health insurance, multisport, shopping vouchers)
• Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
• Referral bonuses
• Corporate, social and well-being events

Please, note:

• The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
• We will reach out to selected candidates exclusively.

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.