Senior Software & DevSecOps Engineer (Go/Java)

Randstad Polska Sp. z o.o.; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

Randstad Polska Sp. z o.o. seeks an experienced Senior Software & DevSecOps Engineer for a global financial enterprise. This hands-on role sits in a new cybersecurity program focused on threat modeling, vulnerability management, SBOM, and secure SDLC, building enterprise-grade applications.

You will design secure software, manage CI/CD pipelines, and drive DevSecOps across the organization. Hybrid work entails 3 days in the modern office with global scope and cutting-edge tooling.

Qualifications

• 5+ years of hands-on experience in enterprise software engineering with strong proficiency in Go and Java.
• Deep understanding of distributed systems, microservices, APIs, and modern design patterns.
• Extensive experience in building and managing CI/CD pipelines and implementing DevSecOps tools.
• Strong knowledge of SDLC practices, secure coding, and software supply chain security concepts (SBOM).

Responsibilities

• Secure Software Engineering: design, develop, and maintain cloud-native enterprise solutions using Go and Java.
• Supply Chain Security: implement controls for dependencies and deployment processes with SBOM and integrity checks.
• DevSecOps & CI/CD Automation: design and optimize CI/CD pipelines with automated security testing.
• Threat Modeling & SDL: champion Secure Development Lifecycle practices and perform security design reviews.
• Architecture & Mentorship: lead code reviews and promote IaC best practices.

Skills

Go

Java

CI/CD

DevSecOps

SBOM

Secure SDLC

Cloud

Kubernetes

Docker

Distributed systems

Tools

GitHub Actions

GitLab

Jenkins

Job description

We are seeking an experienced Senior Software & DevSecOps Engineer for one of our clients, a globally recognized financial enterprise. This hands-on role is embedded within a brand-new cybersecurity initiative focused on building a dedicated platform for threat modeling, vulnerability management, and supply chain security. You will play a pivotal role in designing and securing enterprise-level applications, driving the adoption of Secure Development Lifecycle (SDLC) practices across the organization.

What will your tasks involve?

• Secure Software Engineering: Design, develop, and maintain scalable, cloud-native enterprise solutions using Go (Golang) and Java, ensuring the highest security standards.

• Supply Chain Security: Implement and manage security controls for software dependencies and deployment processes, driving the adoption of Software Bill of Materials (SBOM) and artifact integrity controls.

• DevSecOps & CI/CD Automation: Design and optimize continuous integration and delivery pipelines, embedding automated security testing (e.g., code scanning, dependency analysis) into the workflow.

• Threat Modeling & SDL: Champion Secure Development Lifecycle practices, conduct security design reviews, and collaborate with cybersecurity teams to mitigate vulnerabilities in open-source components.

• Architecture & Mentorship: Lead code reviews, contribute to distributed system design, and promote Infrastructure-as-Code (IaC) best practices within the engineering teams.

What we expect from you?

• Proven Expertise: 5+ years of hands-on experience in enterprise software engineering with strong proficiency in Go and Java.

• Architecture Knowledge: Deep understanding of distributed systems, microservices, APIs, and modern software design patterns.

• CI/CD & DevSecOps: Extensive practical experience in building and managing CI/CD pipelines (e.g., GitHub Actions, GitLab, Jenkins) and implementing DevSecOps tools.

• Security Mindset: Strong knowledge of SDLC practices, secure coding, and software supply chain security concepts (SBOM, vulnerability management).

• Cloud & Containers: Solid familiarity with containerization (Docker, Kubernetes) and major cloud platforms (AWS, Azure, or GCP).

What you can expect from us?

• Stable Employment: A permanent employment contract providing stability within a highly regulated, global enterprise framework.

• Hybrid Work Model: A collaborative hybrid setup requiring 3 days a week from a modern office.

• Global Scope & Greenfield Impact: Direct impact on building a brand-new cybersecurity platform from scratch that will protect a global banking ecosystem.

• Modern Ecosystem: Opportunity to work with cloud-native architectures, advanced security tools, and influence enterprise-wide technical strategies.

Employment agency entry number 47

this job offer is intended for people over 18 years of age

experience

powyżej 24 miesięcy