Senior DevSecOps Engineer

About the Role

We are looking for a Senior DevSecOps Engineer to integrate and operate security controls across our SDLC. As part of the Application Security team, you will embed SAST and SCA tooling in CI/CD pipelines, build dedicated security pipelines, and configure repository policies and curation to reduce supply-chain risk. You will partner with different stakeholders to triage findings, guide remediation, and make secure-by-default practices the path of least resistance.

What You’ll Do

• Integrate and manage security tooling in CI/CD: SAST, SCA, secrets scanning, and container image scanning. Design and maintain automated workflows and gates across pull requests, merges, and releases
• Build and optimize security pipelines and reusable templates in Azure DevOps, Jenkins, GitLab CI/CD, and TeamCity. Implement risk-based thresholds aligned with product teams and tune for signal over noise
• Collaborate with Application Security and Development to triage findings, provide actionable fix guidance, track remediation, and prevent recurrence through guardrails and standards
• Configure and maintain repository policies and curation in package repositories for NuGet, npm, and similar
• Monitor and analyze scanning results across environments. Create concise dashboards and metrics to show coverage, trends, and risk reduction, and refine rules to reduce false positives
• Enhance CI/CD pipelines with secure-by-default configurations. Improve developer experience through documentation, reusable patterns and enablement sessions
• Support audit preparation, evidence collection, and compliance activities tied to the software delivery process

What You’ll Bring

• Experience in DevOps, SRE, or Infrastructure Engineering with hands-on CI/CD integration
• Strong understanding of SSDLC and DevSecOps, including risk-based gates and remediation workflows
• Hands-on experience with CI/CD platforms (Azure DevOps, Jenkins, GitLab CI/CD, TeamCity) and pipeline-as-code (YAML)
• Experience integrating and tuning security tools (SAST, SCA); familiarity with secrets and container image scanning
• Knowledge of artifact repositories, dependency management, and vulnerability/license scanning with policy configuration
• Solid Linux and Windows skills: CLI usage, log analysis, basic networking, and build/container troubleshooting
• Experience with automation and configuration management (Ansible, Helm) and containers/orchestration (Docker, Kubernetes)
• Exposure to Infrastructure as Code (Terraform, CloudFormation, Bicep) and embedding security checks in IaC pipelines
• Basic understanding of application and network security concepts in automated pipelines

Bonus Skills

• Scripting in Python, PowerShell, or Bash
• Familiarity with compliance frameworks; SBOM experience

What You’ll Get

• 26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Paid parental, maternity, and paternity leave
• Fully covered family medical plan, dental, rehab, and vaccinations
• Life, critical illness, and disability insurance
• Employer pension contribution via PPK
• Monthly Edenred allowance of 450 PLN for meals
• MultiSport card fully covered by Veeam, giving access to sports facilities nationwide
• Up to 12 free therapy sessions annually, plus legal and financial advice
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

Please note: If the applicant is permanently present outside of Poland, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in Poland.

#LI-AR1
#Remote