{"id":4012161,"url":"https://alion.io/job/onapsis-devops-engineer-security-2","title":"DevOps Engineer (security)","company":{"id":176052,"name":"Onapsis","domain":"onapsis.com","url":"https://alion.io/company/onapsis","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Grafana","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"New Relic","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-25T18:16:43Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T16:11:04Z","board_verified":true,"closed_at":null,"days_open":76,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":76},"description":"About the job:\nOnapsis is on a mission to safeguard the most critical business applications that business depends on daily. Over 20% of the Fortune 100 rely on Onapsis to secure their business-critical applications and ensure they are compliant and available. \nWe are looking for self-motivated and enthusiastic DevSecOps Engineers who want to impact cybersecurity by continuing to advance, maintain, and enhance our platform features in Threat Detection & Response, Vulnerability Management, and Compliance Automation. \nWhat you will be doing:\nWorking closely with leadership, product management, and our Engineering and Operations teams to design and implement security-focused capabilities across the SDLC using Shift-Left-On-Security principles.\nThis role partners with InfoSec, Technical Operations, and Platform Engineering teams to ensure CI/CD frameworks, infrastructure, and automation tooling are secure by design, resilient, and capable of protecting our customers at scale. \nKey Responsibilities:\n Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (OSS, SAST, DAST, SCA, Container Security and related K8s configuration management) directly into GitLab CI/CD pipelines.\nVulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities.\nSecurity Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards. \nPenetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities.\nSecurity Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry.\nSecurity Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams.\nThreat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production.\nSupport our Engineering teams: Provide in-depth knowledge of the DevSecOPS principles and tools to our engineering teams. Understand their SDLC challenges and provide automation solutions to improve our delivery lifecycle. Provide support with the self servicing shift left on security CICD tools and pipelines if problems arise.\nWhat you’ll bring: \nCybersecurity Expertise (2+ Years)\nHands-on experience implementing Shift-Left-On-Security frameworks within the SDLC.\nPractical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management.\nExperience conducting Threat Modeling exercises and performing secure code reviews.\nAwareness of penetration testing (blackbox, whitebox) methods\nPlus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience.\nDevOps & Cloud Infrastructure (4+ Years)\nProven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP)\nAdvanced problem solving skills and distributed systems engineering concepts.\nAdvanced knowledge of the Software Development Lifecycle (SDLC), its phases and how to enable the shift left on security paradigm in each\nAdvanced knowledge in Source Control Management and CICD tools (Git/GitLab), including branching/versioning strategies, and pipeline development.\nIntermediate knowledge of container infrastructure and related container orchestration platforms (Docker and Kubernetes).\nAdvanced knowledge in cloud computing administration skills and related best practices(AWS)\nAdvanced Application Performance Management and Observability skills for in depth troubleshooting\nIntermediate Infrastructure as a Code and Configuration management skills using Terraform\n Linux system administration skills, including networking, access management, and basic troubleshooting skills.\nAdvanced knowledge in a scripting language (e.g., Python, Bash).\nSoft Skills\nDemonstrated effective communication and collaboration across Engineering, Security, SRE, and cross-functional teams to support delivery and operational objectives\nExperience managing priorities, handling operational pressure, and escalating risks or blockers when needed. Identifies and supportscontinuous improvement initiatives.\nDemonstrated analytical thinking and problem-solving skills to troubleshoot operational, infrastructure, and security-related issues in a structured manner\nStrong attention to detail and asecurity-first mindset when working with CICD pipelines, infrastructure, automation, and cloud environments\nContinuous learning mindset with willingness to share knowledge, contribute to documentation, and support team growth\nWhat we offer: \nA role in shaping the future of protecting the most critical applications that run the world's business and a career that grows as the company grows.\nA unique culture of high achievement and teamwork.\nSupportive and humble colleagues are the space's top problem solvers and innovators.\nFinancial security through competitive compensation and incentives.\nEmployment: Please note that this is a full-time employee role. No B2B or SRLs will be accommodated.\nLocation: Onapsis has established a new development center in Bucharest 3 years ago. This is a hybrid role (2 days per week from the office), so candidates must be commutable to Bucharest at our office in One Park Cotroceni. \nAbout Onapsis:\nOnapsis protects the business applications that run the global economy. The Onapsis Platform delivers vulnerability management, change assurance, and continuous compliance for business applications from leading vendors such as SAP, Oracle, and others. The Onapsis Platform is powered by the Onapsis Research Labs, the team responsible for the discovery and mitigation of more than 1,000 zero-day vulnerabilities in business applications.\nOnapsis is headquartered in Boston, MA, with offices in Dallas, TX, Heidelberg, Germany, Bucharest, Romania, and Buenos Aires, Argentina, and proudly serves hundreds of the world’s leading brands, including close to 30% of the Forbes Global 100, six of the top 10 automotive companies, five of the top 10 chemical companies, four of the top 10 technology companies, and three of the top 10 oil and gas companies.\nOnapsis only invites candidates to apply directly through reputable job boards or the Onapsis careers page on our website. Job offers are extended only after a face-to-face video interview with an Onapsis HR representative. Please disregard any outreach from Onapsis via forums, social networks, or other platforms, as these are fraudulent.\nFor more information, connect with Onapsis on LinkedIn or visit https://www.onapsis.com.","description_format":"text","description_chars":6994,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-10T10:42:15Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.381,"p_room":0.28,"age_days":76,"expected_fill_days":26,"reasons":["conf:1","win:tail","crowd:junior"],"computed_at":"2026-11-10T17:56:25Z"},"pay":null,"html_url":"https://alion.io/job/onapsis-devops-engineer-security-2","json_url":"https://alion.io/job/onapsis-devops-engineer-security-2.json","meta":{"generated_at":"2026-11-10T17:56:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7252,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":176052},"rest":"https://alion.io/mcp/rest/get_company?id=176052"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonapsis-devops-engineer-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonapsis-devops-engineer-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonapsis-devops-engineer-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onapsis-devops-engineer-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonapsis-devops-engineer-security-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4012161}},{"tool":"search_jobs","arguments":{"company":"onapsis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4012161},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}