Senior Cybersecurity SME / DevSecOps Consultant

Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, it employs around 150 professionals delivering a full range of services including specialist and executive recruitment, employee outsourcing, HR consulting, employer branding, and market research. The company combines deep industry expertise with functional specialisation to provide tailored solutions for companies in every sector.

• Strong experience in Cybersecurity, DevSecOps, Platform Security, or Security Engineering roles
• Deep understanding of CI/CD pipelines, cloud-native platforms, Kubernetes/container environments, developer tooling and runtime infrastructure
• Hands-on experience with threat modelling, security assessments, vulnerability management, secure SDLC / DevSecOps practices
• Experience with AWS, Azure and/or GCP
• Strong knowledge of application security, cloud security, network security, and security automation
• Experience working in enterprise or regulated environments
• Strong communication and stakeholder management skills

Nice to Have:

• Experience with SLSA, SBOM, supply chain security
• Security certifications such as CISSP, CISM, CCSP
• Financial services or fintech background preferred

• Conduct security assessments of CI/CD pipelines, build systems, runtime environments, and developer platforms
• Perform threat modelling, gap analysis, and identify security risks across engineering ecosystems
• Define secure engineering standards, security baselines, and policy-as-code controls
• Support implementation of secure-by-design practices across cloud and platform environments
• Drive security improvements related to vulnerability management, software supply chain security, SBOM, code-signing, artifact integrity, access and configuration security
• Build and support security roadmaps with engineering and platform teams
• Act as a trusted advisor for engineering leadership and security stakeholders

Hybrid working: 6 days a month at the office in Kraków