DevSecOps Engineer (Mid-Level)

Quick Facts

• Role: DevSecOps Engineer (mid-level)

• Contract: B2B (PZU TECH)

• Work location: From the territory of Poland

Description

You will secure CI/CD pipelines by integrating security controls such as SAST, DAST, SCA, and secret scanning, then analyze and prioritize the results. The role also covers container and Kubernetes security, security assessment of Infrastructure as Code with Terraform, and configuration and baseline security understanding for Azure or GCP. You’ll collaborate with development and operations teams to document risks and provide actionable remediation recommendations.

Requirements

• 3+ years of commercial experience in DevSecOps, application security, or CI/CD automation

• Practical experience securing CI/CD pipelines and integrating security checks in GitLab CI, GitHub Actions, Jenkins, or Azure DevOps

• Experience configuring and operating SAST, DAST, SCA, and secret scanning; analyze and prioritize outputs

• Knowledge of application security: OWASP Top 10, API Security Top 10, and Secure Software Development Lifecycle

• Practical knowledge of container and Kubernetes security: image scanning, secrets management, configuration control

• Ability to assess Infrastructure as Code security (Terraform) and configure cloud environments

• Knowledge of at least one cloud platform: Azure or GCP, including IAM basics and security logging/monitoring

• Ability to automate tasks with Python, Bash, or PowerShell; work with Linux and Git

• Ability to collaborate with development and operations teams, document risks, and formulate practical remediation recommendations

Benefits

• B2B contract (PZU TECH)

• Services provided from Poland