DevSecOps Engineer

Hitachi, Ltd.; Kraków; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Learning & Development

Diversity & Inclusion

Flexible relocation options

Job summary

GlobalLogic is building a dedicated security validation team focused on vulnerability assessment and security testing across its products and systems. The team runs structured campaigns including penetration testing, vulnerability triage, secure code review, and automated test suites to scale security engineering.

This role emphasizes hands-on security engineering with exposure to AI model acceleration, cloud platforms, containers, and IaC.

Qualifications

• Must have 4+ years in DevOps/DevSecOps with security focus.
• Hands-on with CI/CD tooling (GitLab CI, GitHub Actions, Jenkins, Azure DevOps).
• Experience with SAST/DAST/SCA and secrets scanning in pipelines.
• Strong IaC exposure (Terraform) and IaC security.
• Knowledge of Kubernetes security and container hardening.
• Cloud security fundamentals across AWS/Azure/GCP.
• Secrets management and IAM basics.
• Scripting in Python/Bash and Git workflows.
• Familiarity with OWASP, NIST, CIS, ISO 27001.
• Understanding of LLMs and embedding LLMs into SDLC.
• Strong Linux skills.
• Nice to have: security certifications (CKA/CKS, CISSP), pentesting exposure.

Responsibilities

• Build and maintain secure CI/CD pipelines with security gates.
• Automate security testing and policy checks across SDLC.
• Implement IaC security and secure baseline configuration.
• Manage secrets and credentials across environments.
• Secure containers and Kubernetes with image scanning and hardening.
• Route findings into developer dashboards.
• Define policy-as-code guardrails; track exceptions and drift.
• Support vulnerability management and remediation in pipelines.
• Work with developers to embed security by design.
• Monitor and respond to pipeline and cloud security events.
• Contribute to AI-assisted automation (LLMs/agents) for security tasks.

Skills

DevSecOps

CI/CD tooling

SAST/DAST/SCA

IaC security

Kubernetes security

Cloud security

Secrets management

Scripting (Python/Bash)

Security standards

LLMs/AI agents

Linux administration

Tools

GitLab CI

GitHub Actions

Jenkins

Azure DevOps

Semgrep

Snyk

Trivy

OWASP ZAP

Terraform

HashiCorp Vault

Job description

Job Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.
The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands‑on security engineering. Scope covers internal systems as well as business‑unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

Requirements

• 4+ years in DevOps / DevSecOps or software engineering with a strong security focus.
• Hands‑on with CI/CD tooling (e.g. GitLab CI, GitHub Actions, Jenkins, Azure DevOps).
• Security scanning in pipelines: SAST, DAST, SCA, secrets scanning (e.g. Semgrep, Snyk, Trivy, OWASP ZAP).
• Infrastructure‑as‑Code (e.g. Terraform) and IaC security.
• Containers and Kubernetes security (Docker, K8s, image scanning, hardening).
• Cloud platforms (AWS / Azure / GCP) and cloud security fundamentals.
• Secrets management (e.g. HashiCorp Vault, cloud KMS) and IAM basics.
• Scripting and automation (Python, Bash) and Git.
• Familiarity with standards and frameworks: OWASP, NIST, CIS Benchmarks, ISO 27001.
• Understanding of and hands‑on experience with different LLMs; ability to build AI agents; and knowledge of embedding LLMs into the SDLC and pipelines.
• Strong Linux skills (administration, hardening, command line, shell scripting).
• Nice to have: certifications (e.g. CKA/CKS, AWS/Azure Security, CISSP); pentesting or vulnerability‑management exposure.

Job Responsibilities

• Build and maintain secure CI/CD pipelines; embed security gates (SAST, DAST, SCA, secrets scanning) into the build.
• Automate security testing and policy checks across the SDLC (shift‑left).
• Implement Infrastructure‑as‑Code (IaC) security and secure baseline configuration.
• Manage secrets, keys and credentials (vaulting, rotation) across environments.
• Secure containers and Kubernetes (image scanning, hardening, runtime policies).
• Set up security tooling and route findings into developer workflows and dashboards.
• Define and enforce policy‑as‑code guardrails; track exceptions and drift.
• Support vulnerability management: triage, prioritize and follow remediation through pipelines.
• Work with developers and architects to embed security by design.
• Monitor, log and respond to pipeline and cloud security events; support incident response.
• Contribute to AI‑assisted automation (LLMs/agents) for security tasks in the pipeline.

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting‑edge technologies. As a team, we engineer digital products that positively impact people's lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well‑being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work‑life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic is a full‑lifecycle product development services leader that combines chip‑to‑cloud software engineering expertise and vertical industry experience to help our customers design, build, and deliver their next‑generation products and digital experiences. We expertly integrate design, complex engineering, and agile delivery capabilities to deliver superior business outcomes for global brands in telecom, automotive, healthcare, technology, media and entertainment, manufacturing, and semiconductor industries.

Headquartered in Silicon Valley, GlobalLogic employs over 25,000 designers and engineers across the globe. Analysts like NASSCOM and Zinnov have recognized us for being a top company in our field, and we are consistently nominated as a preferred employer by both global HR consultative firms and local job boards. By creating a work environment that is exciting and flexible, and by fostering growth through ongoing learning and development programs, we empower our employees to achieve both their professional and personal goals.

At GlobalLogic, we make amazing products — and careers.