Embedded DevSecOps Engineer: Secure Firmware & CI/CD

Camlin Group; Kraków; Hybrid; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model (office in Kraków)

Company Pension & Life Assurance Sche

On-site parking (car and bike)

MyBenefit with Multisport & private 의료

Job summary

Camlin is seeking a DevSecOps Engineer to strengthen our Embedded Systems Unit in Kraków. You will work with embedded development teams and the ISMS to ensure cybersecurity requirements (CRA, RED, IEC 62443) are met across development, testing, manufacturing, and deployment environments.

The role is hybrid and remote-friendly, with at least one onsite interview in the Kraków office. You will support full lifecycle of embedded systems, toolchains, factory test infrastructure, and backend services.

Qualifications

• Familiarity with SCA/SAST/DAST tools such as SonarQube, JFrog XRay, or similar.
• Understanding of SBOM standards (CycloneDX, SPDX).
• Programming in Python, Node.js.
• Experience with SQL databases and API design.
• Practical knowledge of monitoring and observability tools (Grafana, Prometheus, Loki).
• Ability to maintain and troubleshoot factory automation systems and backend services.
• Experience with Embedded Linux and Yocto.

Responsibilities

• Execute secure development workflows defined by ISMS.
• Run SCA / SAST / DAST tools within CI/CD pipelines.
• Coordinate grey-box or white-box security tests on firmware and backend releases.
• Validate RED 3.3(d/e/f) cybersecurity safeguards and IEC 62443 component requirements.
• Generate and maintain Software Bills of Materials (SBOMs).
• Operate and maintain firmware signing pipelines.
• Support secure manufacturing workflows such as device identity injection and protected configuration handling.
• Own and improve factory self-tests, diagnostics, and manufacturing server infrastructure.
• Add new dashboards, performance metrics, and manufacturing KPIs.
• Implement data visualization, alerting, and monitoring in Grafana.

Skills

SCA/SAST/DAST tools

SBOM standards

Python

Node.js

SQL databases

API design

Grafana

Prometheus

Loki

Embedded Linux

Yocto

Factory automation

Tools

SonarQube

JFrog XRay

GitLab

Job description

Camlin is seeking a DevSecOps Engineer to strengthen our Embedded Systems Unit in Kraków. You will work with embedded development teams and the ISMS to ensure cybersecurity requirements (CRA, RED, IEC 62443) are met across development, testing, manufacturing, and deployment environments.

The role is hybrid and remote-friendly, with at least one onsite interview in the Kraków office. You will support full lifecycle of embedded systems, toolchains, factory test infrastructure, and backend services.