Security Engineer – Cloud & Software Supply Chain

About the role

Tricentis is looking for a motivated Security Engineer to protect its cloud platforms and software supply chain. You will work within the Product Security organization, collaborating with engineering, SRE and security teams to embed security by design across CI/CD pipelines, cloud environments and container workloads.

Key responsibilities

• Hardening CI/CD pipelines (GitHub Actions, Azure DevOps) with least‑privilege tokens, OIDC federation, pinned dependencies and protected branches.
• Implementing build‑integrity controls such as artifact signing, SBOM generation and SLSA attestations.
• Integrating software composition analysis, container image scanning, secrets detection and IaC scanning into pipelines.
• Managing security of artifact registries, defending against dependency‑confusion and malicious packages.
• Evaluating third‑party and AI‑related dependencies for supply‑chain risk.
• Operating cloud security controls across AWS, Azure (and exposure to GCP) and securing Kubernetes workloads.
• Building guardrails for multi‑cluster, hybrid and serverless environments using GitOps and IaC.
• Automating continuous cloud‑posture audits and driving remediation with owning teams.

Required profile

• 2+ years of experience in DevOps, cloud or security engineering.
• Hands‑on experience with AWS or Azure in production.
• Strong communication skills in English.

Required skills

• AWS, Azure (including IAM, RBAC, OIDC).
• CI/CD tools: GitHub Actions, Azure DevOps.
• Container technologies: Docker, Kubernetes, Helm.
• IaC tools: Terraform, Bicep/ARM templates, CloudFormation.
• Scripting: Python, Bash, PowerShell.
• Supply‑chain security concepts: SBOM, SLSA, artifact signing.

What we offer

• Flexible working schedule with hybrid remote options.
• Learning and career growth opportunities.
• 25 days paid time off, plus sick and volunteering days.
• Home‑office allowance, meal allowance and pension contribution.
• Life & disability insurance and paid sickness leave.
• Team events, hackathons, trainings and social activities.