{"id":1996879,"url":"https://alion.io/job/tricentis-security-engineer-cloud-and-software-supply-chain","title":"Security Engineer, Cloud and Software Supply Chain","company":{"id":42126,"name":"Tricentis","domain":"tricentis.com","url":"https://alion.io/company/tricentis","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic","Brno, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":65000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":477},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SLSA","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Agile","optional":true},{"name":"AI Agents","optional":true},{"name":"Kanban","optional":true},{"name":"Scrum","optional":true}],"status":"live","first_seen_at":"2026-10-07T09:31:30Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-12T18:10:19Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"We are seeking a motivated Engineer to help secure our cloud platforms and the software supply chain that builds and delivers our products. As part of the Product Security organization, you will work closely with Product Security, Security Operations, Engineering, and Site Reliability Engineering to make sure the code we write, the dependencies we consume, the pipelines we run, and the cloud environments we deploy to are secure by design.\nThis is a hands-on engineering role for someone who enjoys building automation, hardening CI/CD pipelines, and turning manual security checks into guardrails that scale across AWS, Azure, and Kubernetes. The ideal candidate has solid DevOps or cloud engineering foundations, a growing depth in security, and a curiosity about emerging supply chain threats, including those introduced by AI tooling and third-party models.\nKey Responsibilities\nHarden CI/CD pipelines (GitHub Actions, Azure DevOps) using least-privilege tokens, OIDC federation to cloud providers, pinned dependencies and actions, and protected branches and environments \nImplement and operate controls for build integrity and provenance, including artifact signing, SBOM generation and attestations aligned with the SLSA framework \nIntegrate and tune software composition analysis, container image scanning, secrets detection, and IaC scanning so findings are accurate, actionable, and enforced at the right gates \nHelp manage the security of artifact registries and package sources, including protections against dependency confusion and malicious or compromised packages \nEvaluate and monitor third-party dependencies, open source components, and AI artifacts (models, datasets, plugins, MCP servers) for supply chain risk \nImplement and maintain cloud security controls and best practices across AWS and Azure, with exposure to GCP \nSecure containerized workloads and Kubernetes clusters, including admission control, image signature verification, Pod Security Standards, and runtime hardening \nBuild and support security guardrails in multi-cluster, hybrid (cloud and on-premise), and serverless environments using GitOps and infrastructure-as-code \nLeverage automation to continuously audit cloud posture, identity and access configurations, and network exposure, and drive remediation with owning teams \nSupport the deployment and operation of security services such as WAF, DDoS protection, secrets management, and identity federation \nCollaboration and Continuous Improvement \nIdentify manual security processes and replace them with automated, developer-friendly workflows \nParticipate in threat modeling for pipelines, cloud architectures, and new platform capabilities \nContribute to vulnerability triage and incident response for cloud and supply chain related events \nWrite clear documentation, runbooks, and secure patterns that engineering teams can adopt with minimal friction \nRequired Qualifications\nEducation and Experience\n2+ years of experience in DevOps, cloud engineering, platform engineering, or security engineering \n2+ years of hands-on experience with AWS or Azure services in a production environment \nTechnical Skills\nHands-on experience building or maintaining CI/CD pipelines (e.g., GitHub Actions, Azure DevOps) and an understanding of how they can be attacked and defended \nWorking knowledge of containerization with Docker, Kubernetes, and Helm \nExperience with infrastructure-as-code tools such as Terraform, Bicep/ARM templates, or CloudFormation \nProficiency in at least one scripting language (Python, Bash, or PowerShell) \nUnderstanding of identity and access management concepts (IAM, RBAC, OAuth, OIDC, workload identity) \nFamiliarity with common supply chain and cloud threats (e.g., dependency confusion, credential leakage in pipelines, misconfigured storage, over-privileged identities) \nCommunicative written and verbal communication skills in English \nNice to have\nExperience generating and consuming SBOMs and applying them to vulnerability management \nExperience with policy-as-code engines \nCloud or security certifications (e.g., AWS Security Specialty, Azure Security Engineer Associate, CKS) \nInterest in AI security, including risks from AI coding assistants, third-party models, and AI agent integrations \nWorking knowledge of the full SDLC and agile methodologies such as Scrum and Kanban \nTricentis Core Values\nKnowing what we need to achieve and how to achieve it is important. Tricentis core values define our ways of working and the behaviors we model that create an enjoyable and successful Tricentis life.\nDemonstrate Self-Awareness: Own your strengths and limitations. \nFinish What We Start: Do what we say we are going to do. \nMove Fast: Create momentum and efficiency. \nRun Towards Change: Challenge the status quo. \nServe Our Customers & Communities: Create a positive experience with each interaction. \nSolve Problems Together: We win or lose as one team. \nThink Big & Believe: Set extraordinary goals and believe you can achieve them. \nYou can look forward to:\nFlexible working schedule (no core hours) \nLearning and career growth opportunities \n25 days of paid time off \n3 Sick Days \n2 days of paid Volunteering Leave per year to get involved in your local community or in a cause that matters to you \nHybrid work environment with home-office allowance \nMeal allowance \nPension Contribution \nLife & Disability Insurance \nPaid Sickness Leave \nA team of passionate professionals who are experts in their fields \nEvents for employees to learn, celebrate, and socialize (training sessions, hackathons, parties, sports events, board game gatherings, BBQs), and much more \nAbout Tricentis:\nTricentis is a software company officially founded in 2007, with primary focus on software quality assurance. Whether exploratory or automated, functional or performance, API or UI, as well as mainframes or custom applications or packaged applications, or cloud-native applications - our comprehensive suite of specialized Continuous Testing tools makes DevOps real by giving our clients the confidence to release on demand.\nTricentis has more than 1500 employees working in across over 20 global offices in US, EMEA, APAC serving over 2100 customers, and currently expanding our R&D centers to two new locations in the Czech Republic - Prague and Brno - Hybrid office environment.\nTricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.\nTricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.\nGlobal Sanctions Compliance\n\nWe comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.","description_format":"text","description_chars":7426,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Growth opportunities","Hybrid work"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Supply Chain","Artificial Intelligence","Gaming","Information Technology"],"lifecycle":[{"event":"open","at":"2026-10-07T09:31:30Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":32,"reasons":["conf:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/tricentis-security-engineer-cloud-and-software-supply-chain","json_url":"https://alion.io/job/tricentis-security-engineer-cloud-and-software-supply-chain.json","meta":{"generated_at":"2026-10-13T05:05:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8013,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":42126},"rest":"https://alion.io/mcp/rest/get_company?id=42126"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftricentis-security-engineer-cloud-and-software-supply-chain"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftricentis-security-engineer-cloud-and-software-supply-chain"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftricentis-security-engineer-cloud-and-software-supply-chain"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tricentis-security-engineer-cloud-and-software-supply-chain\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftricentis-security-engineer-cloud-and-software-supply-chain"}]}