Lead DevSecOps Security Engineer

Description

A global sports technology company that builds products for sports fans and bettors. Its solutions serve more than 1,700 sports federations, media outlets, betting operators and consumer platforms in 120 countries.

The company treats security as central to its products, infrastructure and operations. As its engineering setup changes, it is building up DevSecOps so that security is part of every software delivery stage.

You would join the Information Security organisation in Warsaw as Lead DevSecOps Engineer. The role spans security, platform engineering and software development.

The team covers DevSecOps, cloud security, application security, security tooling and vulnerability management. Nobody has to own every area. You contribute where your strengths can make the biggest difference, and you work across disciplines with engineering, platform and product teams to build secure-by-design systems at scale.

The aim is to move security out of a final review gate and into the development process itself. This is not a traditional operational security job, so engineering skill matters as much as security knowledge.

Responsibilities

• Help build secure software development practices across engineering teams, with security requirements built in from design through deployment.
• Help add security controls and automated security testing to CI/CD pipelines, and support automation across delivery pipelines.
• Work with engineering teams to make applications secure by design, offering secure coding guidance and remediation advice.
• Support cloud security posture management and help secure AWS environments and cloud-native platforms, including assessing cloud risks and advising on fixes.
• Help improve Kubernetes security through controls, monitoring and best practices.
• Support risk-based vulnerability management across applications and infrastructure. Analyse findings, judge business risk, set remediation priorities, and work with engineering teams to fix issues on time.
• Help build scalable processes for finding, triaging and reporting vulnerabilities.
• Act as a trusted security partner on design decisions and implementation choices, and help run security awareness and developer enablement work.
• Help manage and improve security tools in development and operations, including GitLab, SonarQube, Mend, Tenable and Sysdig. Evaluate current and future platforms, find areas to optimise, and support proofs of concept, integrations and automation.

Requirements

• A strong engineering mindset with practical security skills, and the ability to influence stakeholders across a complex technology organisation.
• Proven experience in DevSecOps, security engineering, application security or cloud security.
• A solid grasp of modern software development and CI/CD pipelines.
• Experience securing cloud-native environments, preferably on AWS.
• Experience with Kubernetes and container security.
• Experience putting security controls into software delivery pipelines.
• A strong understanding of vulnerability management and remediation workflows.
• Good knowledge of application security concepts and the OWASP Top 10.
• Experience advising or enabling engineering teams, or working as a security engineer alongside them.
• Strong stakeholder management and communication skills.
• The ability to work independently and push initiatives forward in a global organisation.
• A pragmatic, solution-focused approach to security.
• Experience with Cloud Security Posture Management (CSPM) platforms.
• Experience with Kubernetes Security Posture Management (KSPM) solutions.
• Knowledge of AWS and GCP security best practices.
• Experience with GitLab Ultimate.
• Experience with Infrastructure as Code and security automation.
• Experience in large enterprise organisations.
• Experience supporting modern AI-enabled development environments.
• Relevant security certifications.

Conditions

This role follows an office-first model and is based in Warsaw.

You will work from the Warsaw office five days per week, collaborating closely with engineering, platform and security teams.

Benefits

• The chance to shape and mature DevSecOps capabilities at a leading sports technology company.
• Real ownership, with the ability to influence security strategy and engineering practices.
• Access to modern cloud, platform and security technologies.
• A collaborative international setting alongside skilled engineers and security professionals.
• Continuous learning and professional development opportunities.
• Competitive compensation and benefits.
• Career growth within a global technology organisation.