SecOps Engineer

Remote
Twarda 4, 00-105 Warszawa, Poland
10 months ago

The world is changing. Manufacturing companies are shifting from selling products to delivering services. And we are driving this transformation together with our Customers,

by helping them reduce costs and manual processes. We are guiding them on their journey towards a fully connected service experience and making their brand stronger.

Our goal: to make the complex simple.

Syncron is a leading SaaS company with over 20 years of experience, specializing in aftermarket solutions. Our Connected Service Experience (CSX) platform offers domain-fit solutions for

  • Supply Chain optimization,
  • Pricing strategy,
  • Service Lifecycle Management (e.g. warranty management, field service management, service parts management, knowledge management)

Our unique company culture has been appreciated by our Employees.

With this we are winning the hearts and minds of world-leading organizations, such as JCB, Kubota, Harley-Davidson, Mercedes, Ford, Renault and Nissan.

Syncron has a global presence with Group headquarters in Stockholm, Sweden.

About the role

As SecOps Engineer you will be our main expert in software security topics at Syncron, with two core areas of responsibility:

• SecOps | With our Employee Performance (IT), DevOps and Product teams, you will introduce, integrate and adjust security tools, checks, and tests – all as part of CI/CD, continuously scanning our code and infrastructure for issues and vulnerabilities.

• AppSec | Ensuring Syncron delivers software and services that are secure and guarantee security without sacrificing usability. You will be working with product architects, developers, and service leaders to architect and build current and future products that are secure by design.

About the team

You will be part of our security leadership team, reporting to our SecOps lead. Your peers will be lead product architects and heads of engineering and products. You will be working very closely with our IT team and our compliance team on our ISO / SOC 2 certifications and various compliance efforts. Occasionally, you will be asked to support our sales teams in key deals that require Syncron to demonstrate our security is architected and built using the industry’ best practices. With a primary focus on security architecture for a global cloud vendor but with exposure to our management team, our customers, and auditors, this position is a great opportunity to expand your horizons and grow your career.

What we expect

AppSec track:

  • Experience in building and running cloud-native products, forklifting, and refactoring on-prem products for SaaS (K8S, microservices, AWS/Azure).
  • Hands-on development or scripting experience (i.e. Java, JavaScript, bash), being able to read and understand the code flows and secure the product.
  • Knowledge and know-how in threat modeling, security design, code review, security testing, SSDLC.
  • Ability to coach and share security best practices with our dev teams.
  • Opinions on how to define and manage CVE management policies with our dev teams.

SecOps track

  • Experience working with SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) tools.
  • Understanding how to make the tools an integral part of the infrastructure management & development lifecycle and ensuring a quick feedback loop for all findings.
  • Knowledge of modern build and delivery systems and tools for both on-prem and cloud (I.e. Jenkins, ArgoCD, GitHub Actions, helm, Terraform).

We believe you to have experience in at least one of the following security tracks. We acknowledge that both tracks are hard to master at the same time – if you feel you fit at least one ofthem well and are interested in other ones, do not hesitate to apply.

We offer
  • Remote recruitment, hiring and onboarding process.
  • Flexible working model: fully remote/hybrid/ work from Warsaw office that is centrally located (Plac Grzybowski) - depending on your plans.
  • Environment facilitating professional growth.
  • Respectful and friendly work environment.
  • Scandinavian style and company culture with work-life balance and true care for your wellbeing.
  • Free English & Swedish classes.
  • Fringe benefits (private medical care, multisport card, life insurance).
  • Employee referral program - a bonus of 1500 EUR if the referral gets hired.
  • We do respect one another, and we do enjoy working together – we play pool and board games (mostly online these days), organize charity activities - to name just a few.

 

#LI-Syncron

#LI-Hybrid

#LI-Remote

#Full-Time

#Mid-Snr