Lead Vulnerability Security Engineer - DevSecOps & Cloud

Sportradar AG; Warszawa; On-site; PLN 120,000 - 180,000; Full time

Job summary

Sportradar AG in Warsaw is seeking an Information Security specialist to strengthen vulnerability management, embed security into software development, and support DevSecOps across engineering and platform teams.

You will analyze vulnerabilities across applications and infrastructure, translate findings into practical remediation guidance, and contribute to cloud, Kubernetes, and container security initiatives while driving secure SDLC practices.

Qualifications

• Experience in vulnerability management, DevSecOps, security engineering, application security or a related field.
• Understanding of risk-based vulnerability prioritisation and remediation.
• Experience with CI/CD pipelines and secure software development practices.

Responsibilities

• Analyse and prioritise vulnerabilities across applications, infrastructure, cloud and engineering platforms.
• Partner with technical teams to develop practical remediation plans and drive security risks towards resolution.
• Support vulnerability triage, reporting, remediation tracking and continuous process improvement.
• Help integrate security controls and automated testing into CI/CD pipelines.
• Contribute to secure software development lifecycle practices and developer enablement.
• Support cloud, Kubernetes, container and application security initiatives.

Skills

Vulnerability management

DevSecOps

Security engineering

Application security

CI/CD pipelines

Cloud security

Kubernetes

Container security

Communication

Stakeholder management

Leadership

Tools

GitLab

SonarQube

Mend

Tenable

Sysdig

Job description

Sportradar AG in Warsaw is seeking an Information Security specialist to strengthen vulnerability management, embed security into software development, and support DevSecOps across engineering and platform teams.

You will analyze vulnerabilities across applications and infrastructure, translate findings into practical remediation guidance, and contribute to cloud, Kubernetes, and container security initiatives while driving secure SDLC practices.