DevSecOps Engineer — AI‑Driven Security & CI/CD

GlobalLogic; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

GlobalLogic is building a Security Validation team focused on vulnerability assessment and security testing across the group. You will own secure CI/CD pipelines, conduct SAST/DAST/IAS checks, and automate security in the SDLC while integrating AI-assisted automation for security tasks.

The role covers internal systems and business-unit products, with scope to scale into a permanent capability across multiple cloud environments. Kraków-based, on-site with flexible options may exist.

Qualifications

• 4+ years in DevOps / DevSecOps or software engineering with a strong security focus.
• Hands‑on with CI/CD tooling (e.g. GitLab CI, GitHub Actions, Jenkins, Azure DevOps).
• Security scanning in pipelines: SAST, DAST, SCA, secrets scanning (e.g. Semgrep, Snyk, Trivy, OWASP ZAP).
• Infrastructure-as-Code (e.g. Terraform) and IaC security.
• Containers and Kubernetes security (Docker, K8s, image scanning, hardening).
• Cloud platforms (AWS / Azure / GCP) and cloud security fundamentals.
• Secrets management (e.g. HashiCorp Vault, cloud KMS) and IAM basics.
• Scripting and automation (Python, Bash) and Git.
• Familiarity with standards and frameworks: OWASP, NIST, CIS Benchmarks, ISO 27001.

Responsibilities

• Build and maintain secure CI/CD pipelines; embed security gates into the build.
• Automate security testing and policy checks across the SDLC (shift-left).
• Implement IaC security and secure baseline configuration.
• Manage secrets, keys and credentials across environments.
• Secure containers and Kubernetes (image scanning, hardening, runtime policies).
• Set up security tooling and route findings into developer workflows and dashboards.
• Define and enforce policy-as-code guardrails; track exceptions and drift.
• Support vulnerability management: triage, prioritize and remediation through pipelines.
• Work with developers and architects to embed security by design.
• Monitor, log and respond to pipeline and cloud security events; support incident response.
• Contribute to AI‑assisted automation (LLMs/agents) for security tasks in the pipeline.

Skills

DevSecOps

CI/CD tooling

Security testing

Scripting & automation

Linux administration

Tools

GitLab CI

GitHub Actions

Jenkins

Azure DevOps

Semgrep

Snyk

Trivy

OWASP ZAP

Terraform

Docker

Kubernetes

Job description

GlobalLogic is building a Security Validation team focused on vulnerability assessment and security testing across the group. You will own secure CI/CD pipelines, conduct SAST/DAST/IAS checks, and automate security in the SDLC while integrating AI-assisted automation for security tasks.

The role covers internal systems and business-unit products, with scope to scale into a permanent capability across multiple cloud environments. Kraków-based, on-site with flexible options may exist.