Senior DevSecOps Engineer - Security & CI/CD Gatekeeper

Nortal

Kraków

On-site

PLN 240,000 - 340,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

DefectDojo usage

Kubernetes security focus

Job summary

Nortal is seeking a Senior DevSecOps Engineer to map the operational attack surface across cloud, edge, network, and VM estates. You will lead pipelines, implement security gates, and drive vulnerability management with clear, executive-friendly reporting.

The role includes coordinating cloud and infrastructure engineers and a vulnerability analyst within DevOps, guiding secure delivery globally. Based in Kraków, the role focuses on building robust security gates, triage processes, and

Qualifications

6+ years in DevOps or platform engineering with a DevSecOps focus.
Experience building CI/CD security gates on GitHub Actions or Jenkins.
Vulnerability management at scale with risk-based prioritisation.
Ability to translate findings into reporting trusted by non-technical leaders.

Responsibilities

Maps pipelines (GitHub Actions, Jenkins, ArgoCD, Helm, AWS CodePipeline) and scanners.
Builds a triage process to aggregate outputs, remove duplicates, and rank risk.
Adds SAST, SCA, secrets, container and IaC scanning to pipelines, gating fixes.
Sets branch and repository hygiene rules.
Produces weekly security progress reporting for the CISO.
Leads cloud/infrastructure engineers and vulnerability analysts in DevOps during phase 2.