SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tricentis is seeking a Security Engineer to strengthen the security posture of its cloud platforms and software supply chain. You will join the Product Security organization, collaborating with Product Security, Security Operations, Engineering, and Site Reliability Engineering teams to ensure code, dependencies, pipelines, and cloud environments are secure by design.
This is a hands-on engineering role focused on building automation, hardening CI/CD pipelines, and scaling manual security checks into guardrails across AWS, Azure, and Kubernetes. You will work with someone who has solid DevOps or cloud engineering foundations, growing security depth, and curiosity about emerging supply chain threats, including those from AI tooling and third-party models.
Key Responsibilities:
- Harden CI/CD pipelines (GitHub Actions, Azure DevOps) using least-privilege tokens, OIDC federation, pinned dependencies, and protected branches/environments
- Implement and operate controls for build integrity and provenance, including artifact signing, SBOM generation, and SLSA-aligned attestations
- Integrate and tune software composition analysis, container scanning, secrets detection, and IaC scanning with accurate, actionable findings
- Manage security of artifact registries and package sources, protecting against dependency confusion and malicious packages
- Evaluate and monitor third-party dependencies, open-source components, and AI artifacts (models, datasets, plugins, MCP servers) for supply chain risk
- Implement cloud security controls and best practices across AWS and Azure, with GCP exposure
- Secure containerized workloads and Kubernetes clusters using admission control, image signature verification, Pod Security Standards, and runtime hardening
- Build security guardrails in multi-cluster, hybrid, and serverless environments using GitOps and infrastructure-as-code
- Continuously audit cloud posture, identity/access configurations, and network exposure; drive remediation with owning teams
- Support deployment and operation of security services (WAF, DDoS protection, secrets management, identity federation)
- Identify manual security processes and replace them with automated, developer-friendly workflows
- Participate in threat modeling for pipelines, cloud architectures, and new platform capabilities
- Contribute to vulnerability triage and incident response for cloud and supply chain events
- Write documentation, runbooks, and secure patterns for engineering teams
Tricentis is a software quality assurance company founded in 2007, with over 1,500 employees across 20+ global offices. The company is expanding R&D centers in Prague and Brno with a hybrid work environment.
Benefits include flexible working schedule (no core hours), 25 days PTO, 3 sick days, 2 days paid volunteering leave, home-office allowance, meal allowance, pension contribution, life & disability insurance, and employee events (training, hackathons, sports, socials).
REQUIREMENTS:
Education & Experience:
- 2+ years in DevOps, cloud engineering, platform engineering, or security engineering
- 2+ years hands-on experience with AWS or Azure services in production
Technical Skills (Required):
- Hands-on experience building or maintaining CI/CD pipelines (GitHub Actions, Azure DevOps) with understanding of attack and defense vectors
- Working knowledge of containerization (Docker, Kubernetes, Helm)
- Experience with infrastructure-as-code tools (Terraform, Bicep/ARM templates, CloudFormation)
- Proficiency in at least one scripting language (Python, Bash, PowerShell)
- Understanding of identity and access management (IAM, RBAC, OAuth, OIDC, workload identity)
- Familiarity with common supply chain and cloud threats (dependency confusion, credential leakage, misconfigured storage, over-privileged identities)
- Communicative written and verbal English skills
Nice to Have:
- Experience generating and consuming SBOMs and applying them to vulnerability management
- Experience with policy-as-code engines
- Cloud or security certifications (AWS Security Specialty, Azure Security Engineer Associate, CKS)
- Interest in AI security (risks from AI coding assistants, third-party models, AI agent integrations)
- Working knowledge of full SDLC and agile methodologies (Scrum, Kanban)
