Senior DevSecOps Engineer: Secure CI/CD & IaC

Hitachi, Ltd.; Kraków; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Learning & Development

Diversity & Inclusion

Flexible relocation options

Job summary

GlobalLogic is building a dedicated security validation team focused on vulnerability assessment and security testing across its products and systems. The team runs structured campaigns including penetration testing, vulnerability triage, secure code review, and automated test suites to scale security engineering.

This role emphasizes hands-on security engineering with exposure to AI model acceleration, cloud platforms, containers, and IaC.

Qualifications

• Must have 4+ years in DevOps/DevSecOps with security focus.
• Hands-on with CI/CD tooling (GitLab CI, GitHub Actions, Jenkins, Azure DevOps).
• Experience with SAST/DAST/SCA and secrets scanning in pipelines.
• Strong IaC exposure (Terraform) and IaC security.
• Knowledge of Kubernetes security and container hardening.
• Cloud security fundamentals across AWS/Azure/GCP.
• Secrets management and IAM basics.
• Scripting in Python/Bash and Git workflows.
• Familiarity with OWASP, NIST, CIS, ISO 27001.
• Understanding of LLMs and embedding LLMs into SDLC.
• Strong Linux skills.
• Nice to have: security certifications (CKA/CKS, CISSP), pentesting exposure.

Responsibilities

• Build and maintain secure CI/CD pipelines with security gates.
• Automate security testing and policy checks across SDLC.
• Implement IaC security and secure baseline configuration.
• Manage secrets and credentials across environments.
• Secure containers and Kubernetes with image scanning and hardening.
• Route findings into developer dashboards.
• Define policy-as-code guardrails; track exceptions and drift.
• Support vulnerability management and remediation in pipelines.
• Work with developers to embed security by design.
• Monitor and respond to pipeline and cloud security events.
• Contribute to AI-assisted automation (LLMs/agents) for security tasks.

Skills

DevSecOps

CI/CD tooling

SAST/DAST/SCA

IaC security

Kubernetes security

Cloud security

Secrets management

Scripting (Python/Bash)

Security standards

LLMs/AI agents

Linux administration

Tools

GitLab CI

GitHub Actions

Jenkins

Azure DevOps

Semgrep

Snyk

Trivy

OWASP ZAP

Terraform

HashiCorp Vault

Job description

GlobalLogic is building a dedicated security validation team focused on vulnerability assessment and security testing across its products and systems. The team runs structured campaigns including penetration testing, vulnerability triage, secure code review, and automated test suites to scale security engineering.

This role emphasizes hands-on security engineering with exposure to AI model acceleration, cloud platforms, containers, and IaC.