Senior DevSecOps Engineer

25k - 26k PLN25 000 - 26 000 PLN/ mies./ mies.B2BB2B (netto)

SeniorZdalnie·KrakówInne·B2B

#464756·Dodano dziś·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

GitHub Actions JenkinsVulnerability ManagementSASTSoftware Composition AnalysisHelm

Podsumowanie oferty

The role maps the operational attack surface across the cloud, edge, network, and VM estate, identifying gaps and prioritising remediation. It strengthens pipeline security using GitHub Actions, Jenkins, ArgoCD, Helm, and AWS CodePipeline.

Wymagania

Around 6 years in DevOps or platform engineering, with solid DevSecOps experience.
Experience building CI/CD security gates on GitHub Actions or Jenkins.
Experience with vulnerability management at scale, including risk-based prioritisation.
Ability to turn findings data into reporting a non-technical leader trusts.

Nice to have:

An aggregation tool such as DefectDojo.
Container and Kubernetes security.
SBOM generation and supply chain security (SLSA, Sigstore).
Azure DevOps or AWS CodePipeline.
Building dashboards in Power BI or Datadog.

Obowiązki

Map the pipelines (GitHub Actions, Jenkins with Groovy, ArgoCD and Helm, AWS CodePipeline) and the scanners currently in use.
Build a triage process that combines scanner output, removes duplicates, ranks findings by real risk (CVSS, EPSS, CISA KEV, reachability), and tracks each item to fixed, contained, or risk-accepted with a named owner.
Add SAST, software composition analysis, secrets, container, and infrastructure-as-code scanning to the pipelines, gated so fixed issues stay fixed.
Set branch and repository hygiene rules.
Produce weekly progress reporting for the CISO.
In phase 2, lead the cloud and infrastructure engineers and the vulnerability management analyst inside the DevOps team.

Nortal

4 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz