DevSecOps Security Architect — Platform & Risk

ALTEN Polska; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Full-time contract

Work equipment provided

Conferences and trainings

Certification opportunities

Opportunities to relocate within ALTEN

Job summary

ALTEN Polska is seeking an experienced Engineering Platform Security professional to design and implement a maturity framework, conduct security reviews, and drive secure-by-design practices across engineering platforms.

You will collaborate with platform owners and leadership to prioritise gaps, embed security patterns, and advance vulnerability management, SBOM, and code-signing within workflows.

Qualifications

• Proven cybersecurity expertise in large, regulated environments.
• Experience designing secure engineering platforms, CI/CD, and tooling.

Responsibilities

• Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms.
• Conduct platform security reviews against defined criteria (build systems, CI/CD pipelines, runtime infra, developer tooling).
• Perform threat modelling and gap analysis to identify vulnerabilities and systemic risks affecting source code, artifacts, and workloads.
• Establish standardised secure architecture patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling.
• Define and enforce platform security baselines using policy-as-code and automated controls.
• Remediate gaps with platform owners and implement scalable solutions for artifact integrity and access control.
• Integrate vulnerability management, SBOM, provenance, and code-signing within engineering workflows.
• Prioritise gaps based on business risk and regulatory impact; build actionable security roadmaps.
• Engage with platform owners and leadership; report maturity progress and risk posture.
• Evolve the maturity framework in response to threats and regulatory expectations.
• Drive a culture of secure-by-design engineering across federated teams.

Skills

Cybersecurity

DevSecOps

Threat modelling

Vulnerability mgmt

Security architecture

Stakeholder management

Regulatory engagement

Cloud security

Tools

Kubernetes

CI/CD tooling

SBOM tooling

Job description

ALTEN Polska is seeking an experienced Engineering Platform Security professional to design and implement a maturity framework, conduct security reviews, and drive secure-by-design practices across engineering platforms.

You will collaborate with platform owners and leadership to prioritise gaps, embed security patterns, and advance vulnerability management, SBOM, and code-signing within workflows.