DevSecOps Engineer

HCLTech; Wrocław; On-site; PLN 180,000 - 260,000; Full time

Job summary

HCLTech is seeking an experienced Senior DevSecOps Engineer to join our AppSec Platform team. You will design and maintain security automations, strengthen CI/CD pipelines, and integrate SSDLC practices across development workflows.

You will collaborate with developers, security specialists, and stakeholders to advance secure delivery, contribute to agile ceremonies, and help shape the AppSec platform roadmap for scalable security tooling.

Qualifications

• Proven experience in DevSecOps, platform engineering, or application security.

Responsibilities

• Design, build, and maintain security automations, scripts, templates, and internal tooling.

Skills

DevSecOps

Platform Engineering

Cloud Engineering

SSDLC/SDLC

SAST/DAST

Secrets management

Container security

Vulnerability management

CI/CD security

Collaboration

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Python

Bash

PowerShell

AWS

Azure

GCP

Job description

HCLTech is a global technology company, home to more than 227,000 people across 60 countries, delivering industry-leading capabilities centered around AI, digital, engineering, cloud and software, powered by a broad portfolio of technology services and products.

We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology & Services, Semiconductor, Telecom and Media, Retail and CPG, Mobility and Public Services. Consolidated revenues as of 12 months ending March 2026 totaled $14.7B

Description:

We are looking for an experienced Senior DevSecOps Engineer to join our AppSec Platform team. Our team builds internal tools, automations, templates, and security capabilities that simplify and strengthen secure development practices across the organization.

This role is ideal for someone who combines strong DevSecOps and platform engineering capabilities with experience in agile ways of working and Scrum facilitation. You will play a key role both technically and operationally — helping the team drive secure automation initiatives while also supporting efficient collaboration and agile delivery practices.

You will work closely with developers, architects, security specialists, and stakeholders to integrate security into development workflows and continuously improve our AppSec platform capabilities.

What You Will Do:

DevSecOps & Platform Engineering (Primary Focus)

• Design, build, and maintain security automations, scripts, templates, and internal tooling
• Improve and secure CI/CD pipelines with a security-first mindset
• Implement and support DevSecOps practices such as SAST, DAST, secrets management, container security, and vulnerability management
• Integrate security controls and compliance checks into development workflows and platform services
• Support infrastructure-as-code and cloud security initiatives
• Collaborate with development teams to improve secure software delivery practices
• Help define technical standards, documentation, runbooks, and implementation guides
• Contribute to continuous improvement of the AppSec Platform team's tooling and processes

In addition to your technical responsibilities, you will help strengthen and support the team’s agile ways of working by:

• Facilitating Scrum ceremonies such as sprint planning, daily stand-ups, sprint reviews, and retrospectives
• Supporting PI Planning activities for the AppSec Platform team
• Helping remove blockers and improve team collaboration and delivery flow
• Coaching and supporting the team in agile principles and continuous improvement
• Working with stakeholders and leadership to align priorities and delivery expectations
• Supporting a healthy team culture built on transparency, collaboration, and psychological safety

We see this role as having strong long-term growth potential. Over time, and depending on your interests, strengths, and the evolution of the team, this position may naturally develop into a Digital Product Owner role within the AppSec domain.

This could include increased ownership of product strategy, roadmap planning, stakeholder engagement, and backlog prioritization for one of the AppSec department’s platforms or services.

Additional future opportunities may also include:

• Technical leadership within DevSecOps and AppSec Platform engineering
• Increased strategic influence across secure development and platform initiatives

What We’re Looking For

Must-Have: DevSecOps / Technical Experience

• Proven experience working within DevSecOps, Platform Engineering, Cloud Engineering, or Application Security
• Experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
• Experience with scripting or automation using Python, Bash, PowerShell, or similar
• Understanding of secure software development lifecycle (SSDLC/SDLC) practices
• Knowledge of application security concepts such as OWASP, SAST, DAST, secrets management, and vulnerability management
• Experience working with cloud platforms such as AWS, Azure, or GCP
• Familiarity with infrastructure-as-code and automation practices
• Strong collaboration and communication skills

Important Complementary Experience: Scrum Master / Agile

• Experience working as a Scrum Master, Agile Coach, or Agile Team Facilitator
• Good understanding of Scrum methodology and agile delivery practices
• Experience facilitating agile ceremonies and supporting team delivery processes