Senior Cybersecurity SME / DevSecOps Consultant

We are looking for an experienced Senior Cybersecurity SME / Consultant to support the security maturity of engineering platforms, CI/CD ecosystems, cloud infrastructure, and developer tooling within a large-scale regulated environment.

This role combines cybersecurity consulting, DevSecOps, platform security, and stakeholder engagement across global engineering teams. Hybrid working: 6 days a month at the office in Kraków.

Responsibilities

• Conduct security assessments of CI/CD pipelines, build systems, runtime environments, and developer platforms.
• Perform threat modelling, gap analysis, and identify security risks across engineering ecosystems.
• Define secure engineering standards, security baselines, and policy-as-code controls.
• Support implementation of secure-by-design practices across cloud and platform environments.
• Drive security improvements related to:
  • Vulnerability management
  • Software supply chain security
  • SBOM
  • Code-signing
  • Artifact integrity
  • Access and configuration security
• Build and support security roadmaps with engineering and platform teams.
• Act as a trusted advisor for engineering leadership and security stakeholders.

Requirements

• Strong experience in Cybersecurity, DevSecOps, Platform Security, or Security Engineering roles.
• Deep understanding of CI/CD pipelines, cloud-native platforms, Kubernetes/container environments, and developer tooling and runtime infrastructure.
• Hands-on experience with threat modelling, security assessments, vulnerability management, and secure SDLC / DevSecOps practices.
• Experience with AWS, Azure and/or GCP.
• Strong knowledge of application security, cloud security, network security, and security automation.
• Experience working in enterprise or regulated environments.
• Strong communication and stakeholder management skills.

Nice to Have

• Experience with SLSA, SBOM, and supply chain security.
• Security certifications such as CISSP, CISM, or CCSP.
• Financial services or fintech background preferred.

Why join

• Work in a global, forward-thinking cybersecurity environment.
• Real influence on cloud security strategy and standards.
• Flexible working model and strong career growth opportunities.
• Working under a B2B contract or an employment contract.