DevSecOps Engineer: Secure CI/CD & Cloud Platforms

Aras Corporation; Poland; On-site; PLN 160,000 - 240,000; Full time

Job summary

Aras Corporation is seeking a Product Security Engineer to strengthen our secure DevOps practices in a Poland-based role. You will design and maintain secure CI/CD pipelines, embed security controls in the SDLC, and work across product, cloud, and DevOps teams to remediate risks at scale.

The role requires hands-on experience with SAST/DAST, container security, and cloud security in Azure and/or AWS, plus strong scripting abilities. A degree in CS or related field is expected.

Qualifications

• Experience designing and securing CI/CD pipelines.
• Hands-on scripting in Python or similar languages.
• Strong knowledge of cloud security and container security.
• Experience with Agile development and DevOps practices.

Responsibilities

• Design, develop, and maintain secure CI/CD pipelines using Jenkins, Kubernetes, Azure, and cloud-native technologies.
• Integrate security controls and automated security testing into the software delivery lifecycle.
• Implement and manage SAST, DAST, SCA, secrets detection, IaC scanning, container security, and software supply chain security controls.
• Drive security automation initiatives to reduce manual effort and accelerate secure software delivery.
• Document and verify the existing security mitigations and identify if additional mitigations are required for our products.
• Work with product development teams to guide mitigation development.
• Contribute to the development and implementation of security tests and verification protocols.

Skills

CI/CD pipelines

Python scripting

Cloud security

DevOps collaboration

Education

Bachelor’s degree in Computer Science or related field

Tools

Jenkins

Kubernetes

Azure

AWS

Terraform

SAST/DAST tools

Job description

Aras Corporation is seeking a Product Security Engineer to strengthen our secure DevOps practices in a Poland-based role. You will design and maintain secure CI/CD pipelines, embed security controls in the SDLC, and work across product, cloud, and DevOps teams to remediate risks at scale.

The role requires hands-on experience with SAST/DAST, container security, and cloud security in Azure and/or AWS, plus strong scripting abilities. A degree in CS or related field is expected.