Application Security Engineer: DevSecOps & CI/CD Automation

AgileEngine; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation (USD-based)

Exciting projects

Flextime

Job summary

AgileEngine in Kraków, Poland, is seeking a Middle Application Security Engineer to own hands-on DevSecOps work across CI/CD security, tooling, and remediation guidance for Java and Python teams. The role emphasizes writing Python scripts and tuning SAST/DAST/SCA gates within a large-scale financial services program.

You will collaborate with product teams, implement automated hardened baselines, and drive security across the development lifecycle, requiring 3–5 years of blend of software

Qualifications

• 3–5 years of commercial experience blending software engineering and DevSecOps/AppSec.
• Solid coding proficiency in Python for automation and scripting.
• Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks.
• Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks.
• Upper-intermediate English level.

Responsibilities

• Write and maintain scripts to integrate security gates (SAST, DAST, SCA) into CI/CD pipelines.
• Continuously tune and configure scanning tools to reduce false positives and deliver high-confidence alerts.
• Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Work with product teams to provide actionable remediation guidance in Java and Python.

Skills

Python scripting

CI/CD orchestration

DevSecOps/AppSec

SAST

DAST

SCA tooling

Vulnerability scoring

Upper-intermediate English

Job description

AgileEngine in Kraków, Poland, is seeking a Middle Application Security Engineer to own hands-on DevSecOps work across CI/CD security, tooling, and remediation guidance for Java and Python teams. The role emphasizes writing Python scripts and tuning SAST/DAST/SCA gates within a large-scale financial services program.

You will collaborate with product teams, implement automated hardened baselines, and drive security across the development lifecycle, requiring 3–5 years of blend of software