Senior DevSecOps Engineer Remote

Responsibilities

• Develop and modify Checkmarx scanning rules using CxQL to improve detection capabilities and reduce false positives
• Optimize and customize SAST processes to align with application security requirements
• Deeply understand and advocate for SAST methodologies, explaining the how and why behind their use in the development lifecycle
• Collaborate with developers to integrate SAST tools seamlessly into their workflows and CI/CD pipelines
• Analyze scan results, identify security vulnerabilities, and provide actionable recommendations to the development teams
• Stay updated on the latest security threats and ensure our scanning rules evolve accordingly
• Educate and mentor team members on best practices in application security and SAST

Requirements

• 3+ years of relevant professional experience
• Strong experience with Checkmarx CxSAST or similar SAST tools
• Proficiency in CxQL for writing and modifying scanning rules
• Deep understanding of SAST and its role in secure software development
• Familiarity with GitHub and integrating security scans into CI/CD pipelines
• Excellent analytical skills for interpreting scan results and improving scan accuracy
• Strong communication skills to effectively collaborate with development teams and stakeholders
• Holistic understanding of DevSecOps practices, emphasizing security integration at every phase of software development
• B2+ English level proficiency

Nice to have

• Experience with Python or Go for scripting and automation
• Basic knowledge of the Google Cloud Platform
• Familiarity with CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps
• Experience with containerization and orchestration technologies like Docker and Kubernetes
• Understanding of SecOps tools and practices, including security monitoring, incident response, and threat modeling
• Knowledge of Infrastructure as Code tools like Terraform or Ansible
• Experience with security monitoring and logging tools like ELK Stack or Prometheus

We offer

• We gather like-minded people:
  • Engineering community of industry professionals
  • Friendly team and enjoyable working environment
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Relocation within our 50+ offices
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills, and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, O’Reilly, Cloud Guru
  • Language classes in English and Polish for foreigners
• We cover it all:
  • Stable income (Employment Contract or B2B)
  • Participation in the Employee Stock Purchase Plan
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
  • Referral bonuses
  • Corporate, social and well-being events
• Please, note:
  • The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview
  • We will reach out to selected candidates exclusively