Senior Cybersecurity SME / DevSecOps Consultant

We are looking for an experienced Senior Cybersecurity SME / Consultant to support the security maturity of engineering platforms, CI/CD ecosystems, cloud infrastructure, and developer tooling within a large-scale regulated environment.

This role combines cybersecurity consulting, DevSecOps, platform security, and stakeholder engagement across global engineering teams.

Hybrid working: 6 days a month at the office in Kraków.

Responsibilities

• Conduct security assessments of CI/CD pipelines, build systems, runtime environments, and developer platforms
• Perform threat modelling, gap analysis, and identify security risks across engineering ecosystems
• Define secure engineering standards, security baselines, and policy-as-code controls
• Support implementation of secure-by-design practices across cloud and platform environments
• Drive security improvements related to:
  • Vulnerability management
  • Software supply chain security
  • SBOM
  • Code-signing
  • Artifact integrity
  • Access and configuration security
• Build and support security roadmaps with engineering and platform teams
• Act as a trusted advisor for engineering leadership and security stakeholders

Requirements

• Strong experience in Cybersecurity, DevSecOps, Platform Security, or Security Engineering roles
• Deep understanding of:
  • CI/CD pipelines
  • Cloud-native platforms
  • Kubernetes/container environments
  • Developer tooling and runtime infrastructure
• Hands-on experience with:
  • Threat modelling
  • Security assessments
  • Vulnerability management
  • Secure SDLC / DevSecOps practices
• Experience with AWS, Azure and/or GCP
• Strong knowledge of application security, cloud security, network security, and security automation
• Experience working in enterprise or regulated environments
• Strong communication and stakeholder management skills

Nice to Have

• Experience with SLSA, SBOM, supply chain security
• Security certifications such as CISSP, CISM, and CCSP
• Financial services or fintech background preferred

Why join

• Work in a global, forward-thinking cybersecurity environment
• Real influence on cloud security strategy and standards
• Flexible working model and strong career growth opportunities
• Working under a B2B contract or an employment contract