DevSecOps / Application Security Engineer

1dea is recruitment and IT outsourcing company focusing on expert and managerial positions. We’re based in Poland but thanks to our international network, our capabilities are global. 1dea covers the sectors of IT, Transport, Spedition, Logistics, Property & Construction, Tax & Legal.

• Minimum 3 years of experience in Application Security, DevSecOps, or Software Security
• Practical experience with SAST and DAST
• Experience with tools Fortify and SonarQube
• Experience managing dependencies and vulnerabilities using Sonatype and Dependency-Track
• Good knowledge of Maven and dependency management processes
• Knowledge of secure software development best practices
• Experience integrating security tools with CI/CD pipelines
• English language proficiency enabling fluent communication in a project environment

• Support application security at various stages of the software development process
• Implement and maintain SAST and DAST solutions
• Work with tools Fortify and SonarQube
• Manage dependencies and identify vulnerabilities
• Use Sonatype and Dependency-Track tools
• Assist developers in analyzing and fixing detected vulnerabilities
• Integrate security controls with CI/CD processes
• Monitor and improve application security processes
• Collaborate with developers, DevOps, and security teams