Security Engineer, Cloud and Software Supply Chain

Location: Prague, Czech Republic; hybrid work environment

Company

hirify.global is a software company focused on continuous testing and software quality assurance, with more than 1,500 employees across over 20 global offices.

What you will do

• Harden GitHub Actions and Azure DevOps pipelines with least-privilege access, OIDC federation, pinned dependencies, and protected branches and environments.
• Implement build integrity and provenance controls, including artifact signing, SBOM generation, attestations, and SLSA-aligned practices.
• Integrate and operate software composition analysis, container scanning, secrets detection, and infrastructure-as-code security controls.
• Secure artifact registries, package sources, cloud environments, containerized workloads, and Kubernetes clusters across AWS and Azure, with exposure to GCP.
• Build automated security guardrails for multi-cluster, hybrid, and serverless environments using GitOps and infrastructure-as-code.
• Contribute to threat modeling, vulnerability triage, incident response, documentation, and developer-friendly security workflows.

Requirements

• 2+ years of experience in DevOps, cloud engineering, platform engineering, or security engineering.
• 2+ years of hands-on experience with AWS or Azure in a production environment.
• Experience building or maintaining CI/CD pipelines and understanding how they can be attacked and defended.
• Working knowledge of Docker, Kubernetes, Helm, infrastructure-as-code, and IAM concepts including RBAC, OAuth, OIDC, and workload identity.
• Proficiency in Python, Bash, or PowerShell and familiarity with software supply chain and cloud threats.
• Communicative written and verbal English skills required.

Nice to have

• Experience with SBOMs, vulnerability management, and policy-as-code engines.
• Cloud or security certifications such as AWS Security Specialty, Azure Security Engineer Associate, or CKS.
• Interest in AI security, including AI coding assistants, third-party models, and AI agent integrations.
• Knowledge of the full SDLC and Scrum or Kanban methodologies.

Culture & Benefits

• Flexible working schedule with no core hours.
• Hybrid work with a home-office allowance.
• 25 days of paid time off, 3 sick days, and paid sickness leave.
• Two days of paid volunteering leave per year.
• Meal allowance, pension contribution, and life and disability insurance.
• Learning and career growth opportunities, employee events, hackathons, and team activities.