DevSecOps Engineer

Technologies we use

Expected

• Jenkins
• Groovy
• YAML
• JSON
• Python
• Helm
• Terraform
• SonarQube
• Sonatype IQ
• SAST

Operating system

• Windows

About the project

Are you an expert in CI/CD platforms with a strong security mindset? We are seeking a DevSecOps Engineer to design and evolve secure, high-performance build pipelines for multi-language applications, ensuring supply chain integrity and compliance in a global environment.

Sounds like your kind of challenge?

This is how we organize our work

This is how we work

• agile
• scrum

Your responsibilities

• Design, implement, and maintain Groovy-based Jenkins pipeline steps for build, test, packaging, scanning, and deployment.
• Extend and refine Python tooling for SLSA provenance, SBOM generation, hash/digest verification, and security scan aggregation (SonarQube, Sonatype IQ, SAST, container scans).
• Optimize pipeline performance through parallelization, caching, and smart dependency management.
• Ensure artifact integrity, reproducible builds, and accurate cryptographic mappings (SHA1/SHA256).
• Refactor legacy scripts for stability and compliance, apply standard templates, and eliminate global state issues.
• Define and document ci-config.yaml standards and enforce usage patterns.
• Mentor teams on DevSecOps best practices, supply chain security, and secure pipeline design.
• Troubleshoot and proactively prevent pipeline incidents across environments.
• Note: Detailed project information will be shared during the recruitment process.

Our requirements

• Minimum 7+ years in engineering roles, with 3+ years in DevSecOps or CI/CD platform engineering.
• Strong hands-on expertise with Jenkins Shared Libraries (Groovy).
• Advanced Python programming for automation, YAML/JSON parsing, and tooling development.
• Solid understanding of multi-language build pipelines: Java/Maven, Node/NPM, Python, with exposure to Helm, Terraform, and container image metadata handling.
• Deep knowledge of supply chain security standards (e.g., SLSA, SBOM via CycloneDX, artifact digests).
• Experience with static and container scanning tools: SonarQube, Sonatype IQ, SAST.
• Proven ability in build optimization techniques, caching, and dependency pruning.
• Compliance Awareness & Documentation Discipline.

What we offer

• Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
• Hybrid work setup – 6 days a month from the office in Kraków
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

This is how we work on a project

• Continuous Deployment
• Continuous Integration
• documentation
• issue tracking tools

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Mindbox Sp. z o.o.

At Mindbox, we connect top IT talents with technology projects for leading enterprises across Europe.

Our focus is on matching your skills with work that matters – projects that use modern tech stacks, solve real business challenges, and give you space to grow. By joining us, you’ll deliver technology solutions for well-known brands, supported by the Mindbox team that values knowledge-sharing and continuous development. We make sure you have the tools, flexibility, and guidance to do your best work – and to keep moving forward in your career.