security engineer in sports technology

HireHi; Warszawa; On-site; PLN 260,000 - 380,000; Full time

Benefits offered by this job

Office in Warsaw

Career development

Job summary

Sportradar ищет специалиста по DevSecOps для внедрения безопасных практик на всех этапах разработки, интегрируя безопасность в CI/CD и сотрудничая с командами разработки.

Будет обеспечена поддержка облачной безопасности AWS, цель — безопасная разработка и устойчивость инфраструктуры в глобальной организации, включая Kubernetes и управление уязвимостями.

Офис в Варшаве, полная занятость, конкурентное вознаграждение и возможности для профессионального роста.

Qualifications

• Проведенный опыт в DevSecOps, Security Engineering, Application Security или Cloud Security.
• Сильное понимание современных практик разработки ПО и CI/CD.
• Опыт обеспечения безопасности в облачных средах, предпочтительно AWS.
• Опыт с Kubernetes и безопасностью контейнеров.
• Опыт внедрения контрольных мер безопасности в пайплайны поставки ПО.
• Хорошие знания процессов управления уязвимостями и remediation workflows.
• Опыт сотрудничества с инженерными командами в роли консультанта/помощника по безопасности.
• Умение управлять заинтересованными сторонами и работать независимо.

Responsibilities

• Внедрять безопасные практики на этапах разработки и в CI/CD пайплайнах.
• Интегрировать требования безопасности в дизайн и развитие приложений.
• Сотрудничать с командами разработки и инженерами для безопасной поддержки инфраструктуры.
• Поддерживать автоматизацию безопасности и улучшение процессов доставки ПО.
• Поддерживать управление безопасностью облачных платформ и Kubernetes.
• Оценивать риски облака и предоставлять практические рекомендации.

Skills

DevSecOps

Security Engineering

Cloud Security

Security Testing

Vulnerability Management

Security Architecture

CI/CD

Stakeholder Management

Tools

AWS

Kubernetes

GitLab

Terraform

CI/CD Tooling

Job description

Описание

Sportradar is a sports technology company creating immersive experiences for sports fans and bettors. Its solutions power sports organizations, media companies, betting operators, and sports federations worldwide.

Задачи

• Contribute to implementing Secure Software Development Lifecycle practices across engineering teams
• Embed security controls and automated security testing into CI/CD pipelines
• Integrate security requirements into development processes from design through deployment
• Partner with engineering teams to enable secure-by-design application development
• Support security automation and continuous improvement across software delivery pipelines
• Support the development and enhancement of cloud security posture management capabilities
• Secure AWS-based environments and cloud-native platforms with engineering teams
• Improve Kubernetes security posture through security controls, monitoring, and best practices
• Assess cloud security risks and provide practical remediation guidance
• Support risk-based vulnerability management across applications and infrastructure
• Analyze vulnerability findings, determine business risk, and establish remediation priorities
• Partner with engineering teams to ensure vulnerabilities are remediated effectively and within agreed timelines
• Contribute to scalable processes for vulnerability identification, triage, and reporting
• Provide application security guidance throughout the development lifecycle
• Support engineering teams with secure coding practices and remediation recommendations
• Partner on security design decisions and implementation approaches
• Contribute to security awareness and developer enablement initiatives
• Manage and enhance security tooling integrated within development and operational environments
• Evaluate security platforms and identify opportunities for optimization
• Support proof-of-concept activities, platform integrations, and security automation initiatives

Требования

• Proven experience in DevSecOps, Security Engineering, Application Security, or Cloud Security roles
• Strong understanding of modern software development practices and CI/CD pipelines
• Experience securing cloud-native environments, preferably AWS
• Experience with Kubernetes and container security
• Experience implementing security controls within software delivery pipelines
• Strong understanding of vulnerability management processes and remediation workflows
• Good knowledge of application security concepts and the OWASP Top 10
• Experience collaborating with engineering teams in an advisory, enablement, or security engineering capacity
• Strong stakeholder management and communication skills
• Ability to operate independently and drive initiatives forward in a global organization
• Pragmatic, solution-oriented approach to security

Будет плюсом

• experience with CSPM platforms
• experience with KSPM solutions
• knowledge of AWS and GCP security best practices
• experience with GitLab Ultimate
• experience with Infrastructure as Code and security automation
• experience in large-scale enterprise organizations
• experience supporting modern AI-enabled development environments
• relevant security certifications

Условия

• Competitive compensation and benefits package
• Continuous learning and professional development opportunities
• Career growth opportunities within a global technology organization
• Office-based work in Warsaw five days per week