DevSecOps Engineer
⚲ Kraków
25 200 - 30 450 PLN (B2B)
Wymagania
- Jenkins
- Groovy
- Python
- YAML
- JSON
- Java
- Maven
- Node.js
- npm
- Helm
- Terraform
- Security
- SonarQube
- SAST
- Performance tuning
Opis stanowiska
O projekcie:
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Join our client’s team as a DevSecOps Engineer!
Are you an expert in CI/CD platforms with a strong security mindset? We are seeking a DevSecOps Engineer to design and evolve secure, high-performance build pipelines for multi-language applications, ensuring supply chain integrity and compliance in a global environment.
Sounds like your kind of challenge?
#LI- Hybrid – 6 days a month from the office in Kraków
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6 days a month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
- Experience & Skills:
- Minimum 7+ years in engineering roles, with 3+ years in DevSecOps or CI/CD platform engineering.
- Strong hands-on expertise with Jenkins Shared Libraries (Groovy).
- Advanced Python programming for automation, YAML/JSON parsing, and tooling development.
- Solid understanding of multi-language build pipelines: Java/Maven, Node/NPM, Python, with exposure to Helm, Terraform, and container image metadata handling.
- Security Expertise:
- Deep knowledge of supply chain security standards (e.g., SLSA, SBOM via CycloneDX, artifact digests).
- Experience with static and container scanning tools: SonarQube, Sonatype IQ, SAST.
- Performance Tuning:
- Proven ability in build optimization techniques, caching, and dependency pruning.
- Compliance Awareness & Documentation Discipline.
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Design, implement, and maintain Groovy-based Jenkins pipeline steps for build, test, packaging, scanning, and deployment.
- Extend and refine Python tooling for SLSA provenance, SBOM generation, hash/digest verification, and security scan aggregation (SonarQube, Sonatype IQ, SAST, container scans).
- Optimize pipeline performance through parallelization, caching, and smart dependency management.
- Ensure artifact integrity, reproducible builds, and accurate cryptographic mappings (SHA1/SHA256).
- Refactor legacy scripts for stability and compliance, apply standard templates, and eliminate global state issues.
- Define and document ci-config.yaml standards and enforce usage patterns.
- Mentor teams on DevSecOps best practices, supply chain security, and secure pipeline design.
- Troubleshoot and proactively prevent pipeline incidents across environments.
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Join our client’s team as a DevSecOps Engineer!
Are you an expert in CI/CD platforms with a strong security mindset? We are seeking a DevSecOps Engineer to design and evolve secure, high-performance build pipelines for multi-language applications, ensuring supply chain integrity and compliance in a global environment.
Sounds like your kind of challenge?
#LI- Hybrid – 6 days a month from the office in Kraków
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6 days a month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
- Experience & Skills:
- Minimum 7+ years in engineering roles, with 3+ years in DevSecOps or CI/CD platform engineering.
- Strong hands-on expertise with Jenkins Shared Libraries (Groovy).
- Advanced Python programming for automation, YAML/JSON parsing, and tooling development.
- Solid understanding of multi-language build pipelines: Java/Maven, Node/NPM, Python, with exposure to Helm, Terraform, and container image metadata handling.
- Security Expertise:
- Deep knowledge of supply chain security standards (e.g., SLSA, SBOM via CycloneDX, artifact digests).
- Experience with static and container scanning tools: SonarQube, Sonatype IQ, SAST.
- Performance Tuning:
- Proven ability in build optimization techniques, caching, and dependency pruning.
- Compliance Awareness & Documentation Discipline.
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Design, implement, and maintain Groovy-based Jenkins pipeline steps for build, test, packaging, scanning, and deployment.
- Extend and refine Python tooling for SLSA provenance, SBOM generation, hash/digest verification, and security scan aggregation (SonarQube, Sonatype IQ, SAST, container scans).
- Optimize pipeline performance through parallelization, caching, and smart dependency management.
- Ensure artifact integrity, reproducible builds, and accurate cryptographic mappings (SHA1/SHA256).
- Refactor legacy scripts for stability and compliance, apply standard templates, and eliminate global state issues.
- Define and document ci-config.yaml standards and enforce usage patterns.
- Mentor teams on DevSecOps best practices, supply chain security, and secure pipeline design.
- Troubleshoot and proactively prevent pipeline incidents across environments.
🔍 Dekoder Ogłoszenia
🔴
Join our client’s team as a DevSecOps Engineer!
Będziesz pracować dla klienta firmy rekrutującej, a nie bezpośrednio dla Mindbox.
🔴
Collaborative team culture – work alongside experienced professionals eager to share knowledge
Może oznaczać, że będziesz musiał dużo czasu poświęcać na mentoring lub pomoc mniej doświadczonym kolegom.
🔴
Continuous development – access to training platforms and growth opportunities
Dostęp do platform szkoleniowych nie gwarantuje faktycznego czasu ani budżetu na ich wykorzystanie.
🟡
Minimum 7+ years in engineering roles, with 3+ years in DevSecOps or CI/CD platform engineering.
Wymagane jest znaczące doświadczenie, co może ograniczyć krąg kandydatów lub sugerować, że projekt jest bardzo złożony.
🔴
exposure to Helm, Terraform, and containe
Określenie 'exposure' sugeruje, że znajomość tych narzędzi nie jest wymagana na poziomie zaawansowanym, ale raczej podstawowym lub jako wiedza ogólna.