DevSecOps Engineer (Jenkins, Python)

Verita HR is an international company providing recruitment support within fintech, finance, and banking markets in EMEA.

• 7+ years engineering experience; 3+ years in CI/CD platform or DevSecOps
• Strong Jenkins and Groovy shared library expertise
• Advanced Python automation (JSON/YAML processing, tooling scripts)
• Deep Maven, NPM, Python packaging knowledge; exposure to Helm, Terraform, and container image metadata
• Knowledge of supply-chain security (SLSA, CycloneDX SBOM, digests)
• Experience with SonarQube, Sonatype IQ, container and SAST scanning
• Proven performance tuning (caching, parallelization, dependency pruning)
• Compliance awareness

Nice to have:

• Artifact signing / attestations (cosign, OCI)
• GitOps or release automation experience
• GCP/AWS cloud experience

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy)
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container)
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch)
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling)
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates)
• Document ci-config.yaml standards and usage patterns
• Mentor engineers on secure pipeline development and supply-chain practices
• Troubleshoot and prevent pipeline incidents

Recruitment process includes phone screen with recruiter and two online meetings with hiring managers. Position requires hybrid work with presence in Cracow office six days per month.