DevSecOps Specialist

In Cloud We Trust (ICWT) is an integrator of cybersecurity solutions and provider of security services related to cloud, applications, and development environments. Their work includes designing solutions, conducting implementations, advising technical teams, and improving organizational security levels.

Cloud Security:

• Good understanding of at least one cloud platform, preferably AWS or GCP.
• Knowledge of cloud-native architecture, IAM, networking, secrets management, and cloud service configuration.
• Ability to identify misconfigurations and security risks in cloud environments.

Containers and Kubernetes:

• Practical experience with Docker and Kubernetes.
• Understanding of container build, run, and security.
• Knowledge of Kubernetes cluster security, container image security, and runtime security.
• Ability to diagnose container environment issues.

CI/CD and DevSecOps:

• Practical knowledge of CI/CD pipelines.
• Understanding of integrating security in software development and deployment (including SAST, DAST, SCA, IaC scanning, secrets scanning, container security).
• Experience with GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps or similar.
• Knowledge of Terraform or other Infrastructure as Code tools.

Application Security:

• Understanding web application and API security.
• Familiarity with common vulnerability classes and mitigation.
• Knowledge of OWASP Top 10.
• Ability to analyze risk at code, application, API, and infrastructure levels.
• Understanding secure software development lifecycle principles.

Secure AI Development:

• Basic knowledge of AI applications security risks and LLM models.
• Awareness of risks such as prompt injection, data leakage, vulnerable dependencies, and access control issues.

Communication and English:

• Ability to clearly explain technical topics.
• Willingness to lead presentations and client discussions.
• Communicative English proficiency and ability to read technical documentation.

Additional assets:

• Experience scripting with Python, Bash or other languages.
• Experience working with clients and performing technical workshops.
• Knowledge of API security and software supply chain security.
• Engagement in security communities or projects (homelabs, CTFs).
• Relevant certifications in AWS, GCP, Kubernetes, or cybersecurity.

• Implementing and configuring solutions in cloud security, application security, and DevSecOps. • Integrating security tools into client environments. • Securing CI/CD pipelines and software development lifecycle processes. • Analyzing security for AWS, GCP, and other cloud platforms. • Working with containers and Kubernetes environments. • Analyzing application architecture and identifying security risks. • Supporting clients in building secure software development processes. • Working with AI-based application security solutions using LLM models. • Conducting presentations, demonstrations, and technical workshops. • Providing technical advisory in cybersecurity projects. • Testing new tools and preparing technology recommendations. • Collaborating with technology providers, partners, and client teams.

The process involves personal data processing by In Cloud We Trust Sp. z o.o. as data controller. Data provision is mandatory as per Labour Code, with other data voluntary. Applicants have rights regarding access, rectification, and deletion of data. Personal data will be processed until recruitment completion or for potential claims, or until consent withdrawal for future recruitments.