DevSecOps Engineer

At DBeaver, our team has a shared vision to integrate data into the routines and decision-making process of every individual. With a dedicated community of over 10 million active users worldwide who constantly inspire us, our open-source approach fuels innovation within. 

We are looking for a DevSecOps Engineer to join our development team and help keep our infrastructure and products secure, focusing on cloud infrastructure, CI/CD security, and vulnerability management. You'll also help our engineering teams build secure products and have real influence over how we approach security.

Location: This role can be based in our hybrid offices in Belgrade, Serbia, or Budapest, Hungary; or remotely in Europe.

What You’ll Do:

- Design, implement, and maintain secure cloud and on-premise infrastructure.

- Integrate security controls into CI/CD pipelines and development workflows.

- Automate security checks, compliance validation, and vulnerability management processes.

- Secure containerized environments and Kubernetes clusters.

- Implement and maintain secrets management, identity, and access control solutions.

- Monitor infrastructure and applications for security threats and vulnerabilities.

- Collaborate closely with developers, QA engineers, and platform teams to promote DevSecOps best practices.

- Participate in security reviews, architecture discussions, and threat modeling activities.

- Contribute to security standards, policies, and technical documentation.

What You Bring: 

- 5+ years in DevOps, DevSecOps, or infrastructure engineering, with recent focus on security.

- Hands-on cloud security experience, preferably with AWS environments. 

- Experience working with pen testers or running security assessments, and following findings through to fixes.

- Experience implementing vulnerability scanning, CVE triage, dependency management, and container security controls.

- Understanding of application and infrastructure security principles.

- Knowledge of networking fundamentals, IAM, secrets management, and secure authentication mechanisms.

- Hands-on experience with Docker and Kubernetes in production.

- Experience with infrastructure as code, such as Terraform, and CI/CD platforms such as Jenkins or similar. 

- Knowledge of English (B2 level).

Bonus Skills:

- Knowledge of security frameworks and standards such as ISO 27001 or NIST.

- Experience creating security practices for AI use, not just using AI tools.

- Experience with SIEM, monitoring, and observability platforms.

- Security certifications such as AWS Security Specialty, CKS, CISSP, CCSP, or similar.

- Experience contributing to open-source projects.

- Understanding of database security concepts and data protection practices.

We Use the Following Tools: 

- AWS

- Kubernetes

- Docker

- Terraform 

- GitHub

- Prometheus

- Grafana

- ELK Stack

About DBeaver:

DBeaver Corporation provides a full-featured data solution that easily adapts to users' needs, from open-source tools to all-in-one enterprise software. Our mission is to make it possible for all kinds of people and organizations to leverage all kinds of data.  

We are committed to creating a diverse and inclusive workplace where everyone feels welcomed and valued. If you are looking for an opportunity to join a collaborative and supportive team, we invite you to apply today.