Lead DevSecOps Security Engineer

We’re the world’s leading sports technology company, at the intersection between sports, media, and betting. More than 1,700 sports federations, media outlets, betting operators, and consumer platforms across 120 countries rely on our know-how and technology to boost their business.

• Proven experience in DevSecOps, Security Engineering, Application Security, or Cloud Security.
• Strong understanding of modern software development practices and CI/CD pipelines.
• Experience securing cloud-native environments, preferably AWS.
• Experience working with Kubernetes and container security.
• Experience implementing security controls within software delivery pipelines.
• Strong understanding of vulnerability management and remediation workflows.
• Good knowledge of application security concepts and OWASP Top 10.
• Experience collaborating with engineering teams in advisory or security engineering capacity.
• Strong stakeholder management and communication skills.
• Ability to work independently and drive initiatives in a global organisation.
• Pragmatic, solution-oriented approach to security.

Nice to have:

• Experience with Cloud Security Posture Management (CSPM) platforms.
• Experience with Kubernetes Security Posture Management (KSPM) solutions.
• Knowledge of AWS and GCP security best practices.
• Experience with GitLab Ultimate.
• Experience with Infrastructure as Code and security automation.
• Experience in large-scale enterprise organisations.
• Experience supporting modern AI-enabled development environments.
• Relevant security certifications.

Secure SDLC & DevSecOps:

• Contribute to the implementation of Secure Software Development Lifecycle practices across engineering teams.
• Embed security controls and automated security testing into CI/CD pipelines.
• Ensure security requirements are integrated into development processes from design through deployment.
• Partner with engineering teams to enable secure-by-design application development.
• Support security automation and continuous improvement across software delivery pipelines.

Cloud & Kubernetes Security:

• Support development and enhancement of cloud security posture management capabilities.
• Secure AWS-based environments and cloud-native platforms.
• Improve Kubernetes security posture through security controls, monitoring, and best practices.
• Assess cloud security risks and provide remediation guidance.

Vulnerability Management:

• Support risk-based vulnerability management across applications and infrastructure.
• Analyse vulnerability findings, determine business risk, and establish remediation priorities.
• Partner with engineering teams to ensure timely vulnerability remediation.
• Contribute to scalable processes for vulnerability identification, triage, and reporting.

Application Security:

• Provide application security guidance throughout development lifecycle.
• Support secure coding practices and remediation recommendations.
• Advise on security design decisions and implementation approaches.
• Contribute to security awareness and developer enablement.

Security Engineering & Tooling:

• Manage and enhance security tooling integrated in development and operational environments.
• Evaluate security platforms for optimisation opportunities.
• Work with tools such as GitLab, SonarQube, Mend, Tenable, and Sysdig.
• Support proof-of-concept, platform integrations, and security automation initiatives.

This role follows an office-first approach and is based in Warsaw. Successful candidates must work from the Warsaw office five days per week. Sportradar is an Equal Opportunity Employer committed to diversity and inclusion.