Lead DevSecOps Security Engineer

Description

A sports technology company that works with hundreds of sports organisations, media companies, betting operators and federations worldwide.

The company treats security as essential to its products, infrastructure and business operations. Its engineering landscape is changing, so it is building up DevSecOps so that security is part of every step of software delivery.

The role is a Lead DevSecOps Engineer in the Information Security organisation, based in Warsaw.

The role sits between security, platform engineering and software development. The aim is to make security a routine part of the software development lifecycle instead of a final checkpoint.

You will join a multidisciplinary Information Security team that works with engineering, platform and product teams to build secure-by-design solutions at scale. The team covers DevSecOps, cloud security, application security, security tooling and vulnerability management. Nobody is expected to own every area. You will bring your own expertise and help where your strengths and interests have the most impact.

You will contribute to some of the following areas, depending on your experience and the team's priorities.

Responsibilities

• Help put secure software development practices into place across engineering teams.
• Help add security controls and automated security testing to CI/CD pipelines.
• Make sure security requirements are part of development work, from design through deployment.
• Work with engineering teams to build applications securely from the start.
• Support security automation and ongoing improvement across delivery pipelines.
• Help build and improve cloud security posture management capabilities.
• Work with engineering teams to secure AWS environments and cloud-native platforms.
• Help strengthen Kubernetes security through controls, monitoring and good practice.
• Assess cloud security risks and recommend practical fixes.
• Support risk-based vulnerability management across applications and infrastructure.
• Review vulnerability findings, judge the business risk and set remediation priorities.
• Work with engineering teams to fix vulnerabilities properly and within agreed timelines.
• Help build scalable processes for finding, triaging and reporting vulnerabilities.
• Provide application security guidance across the development lifecycle.
• Advise engineers on secure coding and remediation.
• Act as a trusted security partner on design decisions and implementation choices.
• Help run security awareness and developer enablement initiatives.
• Help manage and improve security tools used in development and operations.
• Assess current and future security platforms and find ways to optimise them.
• Work with tools such as GitLab, SonarQube, Mend, Tenable, Sysdig and similar solutions.
• Support proofs of concept, platform integrations and security automation work.

Requirements

• You combine an engineering mindset with real security expertise and can influence stakeholders across a complex technology organisation.
• Proven experience in DevSecOps, security engineering, application security or cloud security.
• Solid understanding of modern software development practices and CI/CD pipelines.
• Experience securing cloud-native environments, preferably on AWS.
• Experience with Kubernetes and container security.
• Experience adding security controls to software delivery pipelines.
• Strong grasp of vulnerability management processes and remediation workflows.
• Good knowledge of application security concepts and the OWASP Top 10.
• Experience advising or enabling engineering teams, or doing security engineering alongside them.
• Strong stakeholder management and communication skills.
• Able to work independently and push initiatives forward in a global organisation.
• A pragmatic, solution-focused approach to security.
• Experience with Cloud Security Posture Management (CSPM) platforms.
• Experience with Kubernetes Security Posture Management (KSPM) solutions.
• Knowledge of AWS and GCP security best practices.
• Experience with GitLab Ultimate.
• Experience with infrastructure as code and security automation.
• Experience in large enterprise organisations.
• Experience supporting modern AI-enabled development environments.
• Relevant security certifications.

Conditions

This is an office-first role based in Warsaw.

You will work from the Warsaw office 5 days per week, collaborating closely with engineering, platform and security teams.

Benefits

• The chance to shape and grow DevSecOps capabilities at a leading sports technology company.
• Real ownership, with the ability to influence security strategy and engineering practices.
• Access to modern cloud, platform and security technologies.
• A collaborative international environment alongside skilled engineering and security professionals.
• Continuous learning and professional development opportunities.
• Competitive compensation and benefits package.
• Career growth within a global technology organisation.