DevSecOps Specialist (regular/senior) (She/He/They)

Accenture Poland; Warszawa; On-site; PLN 252,951 - 379,426; Full time

Benefits offered by this job

Permanent employment contract

Extensive training package

Private medical care and life insurance

Job summary

A leading consulting firm in Poland is looking for a DevSecOps Specialist to integrate security throughout the software development lifecycle. You will collaborate with design and development teams while managing CI/CD pipelines, ensuring compliance and resilience in clients' public cloud environments. The ideal candidate should have hands-on experience with cloud platforms and a solid understanding of cybersecurity principles. This role promises continual learning opportunities as well as a diverse and creative workplace.

Qualifications

• Solid understanding of cybersecurity concepts, or strong motivation to learn, with several years in IT or DevOps.
• Hands-on experience with a major cloud platform: Azure, GCP, or AWS.
• Knowledge of web application security principles like OWASP Top 10.

Responsibilities

• Collaborate with teams to embed security principles in the SDLC.
• Design and manage CI/CD pipelines with automated security.
• Conduct security assessments of hybrid solutions.

Skills

Cybersecurity concepts

Cloud platform experience (Azure, GCP, AWS)

Web application security principles

Containerization and orchestration knowledge

SAST, DAST, SCA tools

Knowledge of SSDLC processes

API security principles

AI-related security awareness

Threat modeling

Scripting in languages such as Python

Tools

Ansible

Azure DevOps

Jenkins

GitLab

Security tools (Snyk, Veracode, Checkmarx)

Job description

DevSecOps Specialist (regular/senior) (She/He/They)

WHO WE ARE

We are part of the Cyber Security team at Accenture Security, assisting clients in securing hybrid environments and applications throughout the software development lifecycle with a focus on “Security by design” and “Security by default.”

THE WORK

• Collaborate with design and development teams to embed security principles from the start of the SDLC.
• Support migration and transformation projects by integrating security into new technology layers and public cloud environments.
• Design, develop, and manage CI/CD pipelines with automated security steps.
• Automate security tasks within DevOps using tools such as Ansible, Azure DevOps, Jenkins, and GitLab.
• Conduct security assessments of hybrid solutions and assist teams in securing public cloud environments (Azure, GCP, AWS).
• Secure public cloud and microservices-based environments, ensuring compliance and resilience.
• Protect AI‑driven applications throughout their lifecycle.
• Perform in‑depth security reviews of API designs, source code, and deployment processes to identify and mitigate vulnerabilities.
• Implement advanced API security platforms and real‑time monitoring solutions.
• Conduct comprehensive threat analyses and propose mitigation strategies.
• Act as a trusted advisor on secure design principles and emerging trends.
• Support clients in advancing DevSecOps maturity with modern methodologies and AI‑driven approaches.
• Integrate security tools (Snyk, Veracode, Checkmarx, Opentext, WIZ, Argo CD) into CI/CD environments.

WHAT’S IN IT FOR YOU

• Work on international client projects to expand your security skill set.
• Contribute in a diverse and creative workplace.
• Access continuous learning through workshops and skill‑building initiatives.

HERE’S WHAT YOU’LL NEED

• Solid understanding of cybersecurity concepts or strong motivation to deepen expertise, with several years of experience in IT or a DevOps‑related role.
• Hands‑on experience with at least one major cloud platform: Azure, GCP, or AWS.
• Knowledge of web application security principles (OWASP Top 10, secure coding, XSS, CSRF, SQL Injection, MITRE).
• Basic knowledge of containerization and orchestration (Kubernetes, OpenShift).
• Experience with SAST, DAST, and SCA tools integrated into CI/CD pipelines and understanding of authentication, authorization, session management (SAML, OAuth, SSO).
• Knowledge of SSDLC processes, REST API technology, and API Gateway concepts.
• Application and API security principles, covering secure design, development, deployment practices.
• Foundational knowledge of AI model architectures, memory context, prompt engineering, and external service integration.
• Awareness of AI‑related security risks (prompt injection, data leakage, misuse) and fundamentals of AppSec.
• Experience conducting security reviews of API designs, source code, deployments, and implementing security platforms and monitoring.
• Ability to integrate security into DevOps pipelines applying SSDLC principles.
• Skilled in threat modeling and proposing robust mitigation strategies.
• Curiosity and adaptability to explore emerging technologies and prototype solutions.

BONUS POINTS IF YOU HAVE

• Proficiency in Java, .Net, C#, JavaScript, Go, or Python scripting.
• Experience building solutions with Large Language Models (Azure OpenAI, LangChain), REST APIs, embeddings, vector databases.
• Hands‑on scripting, prototypes, micro‑applications.
• Experience with DevSecOps tools (Snyk, WIZ, IriusRisk, CrowdStrike, Aqua Security, Checkmarx, Opentext, Argo CD).

WHAT WE OFFER

• Permanent employment contract.
• Individual support from a People Lead and peer coaching.
• Extensive training package (technical, soft, language, e‑learning, certifications).
• Employee Assistance Program (legal, financial, psychological).
• Eligibility for share purchase plan and quarterly dividends.
• Paid employee referral program.
• Private medical care and life insurance.
• Access to Worksmile platform and fitness benefits.

EEO Statement: Accenture does not discriminate on the basis of race, religion, sex, age, disability, etc. All candidates are welcome.