DevSecOps Engineer

Aduna Global; Łódź; On-site; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Hybrid work model (3 days in Łódź, 2远)

Private medical care

Life insurance

Multisport card

Unlimited paid time off

International environment

Job summary

Aduna Global is seeking a Senior Security Engineer to own security outcomes across platforms, AI features, and governance. You will work hands-on with engineering teams to implement controls, threat modeling, and risk decisions, while maintaining alignment with telecom security guidelines.

This role emphasizes ownership, cross-team collaboration, and the ability to translate policies into automated safeguards, secret management, and secure CI/CD practices in AWS, Azure, and Kubernetes

Qualifications

• 8+ years of security engineering experience across security, cloud, or app security.
• Proven track record in managing security risk across engineering teams.
• Experience with AI/ML-enabled systems and governance.

Responsibilities

• Own security controls across application, infrastructure, and AI layers.
• Lead cross-team security initiatives across Platform, Integration, SRE, and Product.
• Translate governance policies into automated technical controls.

Skills

Security engineering

Cloud security

Threat modeling

IAM

Kubernetes security

AI/ML security

Cross-team leadership

Education

Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience

Tools

HashiCorp Vault

AWS

Azure

Kubernetes

GitOps

Job description

All Together, Extraordinary

adunaglobal.com

Aduna is the Connector of networks, bringing together leading telecom operators and technology partners to simplify global access to Network APIs. Through a single, unified platform, we enable businesses and developers to build more secure, seamless and innovative digital services.

Aduna’s Security Area of Focus exists to protect the company, our CSP partners, and the data flowing through our APIs, while enabling the rest of the engineering organization to move fast and adopt AI safely. As a Senior Security Engineer in this group, you will be an Individual Contributor accountable for implementing security solutions across Aduna’s platform and integration estate, and for operationalizing the standards, policies, and risk decisions issued by the Security governance function.

You will work hands-on, in collaboration with engineering teams across the company, to turn governance into engineered controls and guardrails that scale,including the controls needed to secure how we build with, and expose, AI capabilities.

This is a hands-on technical role focused on owning security outcomes. While it does not include people management, it requires strong accountability, the ability to drive and influence engineers across teams toward the right security decisions, and rigorous attention to standards and applicable telecom security guidelines.

What you will be focused on

Risk Ownership and Cross-Team Leadership

• Operate with ownership and accountability for one or more security risks at Aduna, including risks introduced by AI and LLM-based features, driving and influencing engineering teams to comprehensively address those risks while enabling the company to move fast.
• Lead cross-organizational technical efforts to solve challenging security problems that span the Platform, Integration, SRE, and Product teams.
• Disambiguate and decompose security problems andsolutions, andcreating clarity for engineering and product partners.

Security Implementation and Engineered Controls

• Design and implement security controls across application, infrastructure, and AI layers, including identity, authentication, authorization, encryption, secret management, and model and prompt safety controls.
• Operate and evolve Aduna’s secret management platform built onHashiCorpVault, including secrets engines, dynamic credentials, policies, namespaces, and integration with workloads, CI/CD, and AI/agent toolchains.
• Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments against internal standards and industry best practices.
• Build and maintain security tooling and automation for vulnerability management, dependency scanning, SAST/DAST, container and image scanning, infrastructure-as-code policy enforcement, and emerging categories such as model and prompt scanning.
• Apply AI to security itself: use LLMs, agents, and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with appropriate human oversight.

Governance and Policy Operationalization

• Translate policies, standards, and risk decisions issued by the Security governance function into concrete technical controls, automated checks, and developer-facing guidance, including standards for the responsible and ethical use of AI.
• Support audits and assessments by providing technical evidence, walkthroughs, and remediation plans.

What You Bring

Education

Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.

Experience

• 8+ years of experience in security engineering, application security, cloud security, or a closely related discipline.
• Proven track record of managing security risk and navigating thetradeoffbetween security and friction in an engineering organization.
• Experience driving cross-team engineering and security initiatives end to end.
• Experience with system design, threat modeling, and risk assessment, ideally including AI or ML-enabled systems.

Technical Skills

• Strong working knowledge of security standards and frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks), plus growing familiarity with AI-specific frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS).
• Knowledge of current threat tactics, techniques, and procedures, including AI-specific threats such as prompt injection, model and data poisoning, jailbreaks, and unsafe autonomous actions.
• Solid knowledge of identity and access management, including OAuth 2.0, OIDC, SAML,mTLS, and PKI.
• Experience with cloud security on AWS and/or Azure (IAM, KMS, network security, logging, posture management).
• Experience with Kubernetes security (RBAC, network policies, admission control, image signing, runtime security).
• Working knowledge of infrastructure as code andGitOps(Terraform,FluxCD, GitLab CI or similar) and how to embed security controls into them

Our Offer

• Employment contract providing security and transparency.
• Hybrid work model: 3 days in the office in Łódź (Poland), 2 days remote.
• Private medical care, life insurance, and Multisport card.
• Unlimited paid time off.
• High level of autonomy, ownership, and influence.
• An international environment where your work will have direct business impact.

Aduna is committed to fostering a diverse and inclusive workplace. We welcome applicants from all backgrounds who are passionate about driving the next wave of innovation in telecommunications.