SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Sportradar, the world's leading sports technology company, is seeking a DevSecOps Security Engineer to join its Information Security organization in Warsaw. This role sits at the intersection of Security, Platform Engineering, and Software Development, focusing on integrating security controls into engineering workflows and enabling developers to build securely.
You will be responsible for:
**Secure SDLC & DevSecOps**: Implementing Secure Software Development Lifecycle practices across engineering teams, embedding security controls and automated security testing into CI/CD pipelines, and ensuring security requirements are integrated from design through deployment. You'll partner with engineering teams to enable secure-by-design application development and support security automation across software delivery pipelines.
**Cloud & Kubernetes Security**: Supporting the development of cloud security posture management capabilities, securing AWS-based environments and cloud-native platforms, and improving Kubernetes security posture through implementation of security controls, monitoring, and best practices. You'll assess cloud security risks and provide practical remediation guidance.
**Vulnerability Management**: Supporting risk-based vulnerability management activities across applications and infrastructure, analyzing vulnerability findings to determine business risk, and establishing remediation priorities. You'll partner with engineering teams to ensure vulnerabilities are remediated effectively and contribute to scalable processes for vulnerability identification, triage, and reporting.
**Application Security**: Providing application security guidance throughout the development lifecycle, supporting engineering teams with secure coding practices and remediation recommendations, and working as a trusted security partner on security design decisions.
**Security Engineering & Tooling**: Contributing to the management and enhancement of security tooling integrated within development and operational environments. You'll work with tools such as GitLab, SonarQube, Mend, Tenable, and Sysdig, and support proof-of-concept activities and security automation initiatives.
You will work closely with Platform Engineering, Central Engineering, and development teams to ensure security becomes a seamless part of the Software Development Lifecycle. This is not a traditional operational security position—you'll combine security expertise with engineering thinking to help scale secure development practices across the organization.
**Requirements**:
- Proven experience working in DevSecOps, Security Engineering, Application Security, or Cloud Security roles
- Strong understanding of modern software development practices and CI/CD pipelines
- Experience securing cloud-native environments, preferably AWS
- Experience working with Kubernetes and container security
- Experience implementing security controls within software delivery pipelines
- Strong understanding of vulnerability management processes and remediation workflows
- Good knowledge of application security concepts and the OWASP Top 10
- Experience collaborating with engineering teams in an advisory, enablement, or security engineering capacity
- Strong stakeholder management and communication skills
- Ability to operate independently and drive initiatives forward in a global organization
- Pragmatic, solution-oriented approach to security
**Nice to Have**:
- Experience with Cloud Security Posture Management (CSPM) platforms
- Experience with Kubernetes Security Posture Management (KSPM) solutions
- Knowledge of AWS and GCP security best practices
- Experience with GitLab Ultimate
- Experience with Infrastructure as Code and security automation
- Experience in large-scale enterprise organizations
- Experience supporting modern AI-enabled development environments
- Relevant security certifications
