SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Sportradar, the world's leading sports technology company, is seeking a DevSecOps Security Engineer to join its Information Security organization in Warsaw. This role sits at the intersection of Security, Platform Engineering, and Software Development, focusing on integrating security controls into engineering workflows and enabling developers to build securely.
You will be responsible for embedding security into every stage of software delivery, improving cloud and Kubernetes security posture, and driving risk-based vulnerability management across the technology landscape. Working closely with Platform Engineering, Central Engineering, and development teams, you will ensure security becomes a seamless part of the Software Development Lifecycle rather than a gate at the end of the process.
Key responsibilities span multiple areas:
**Secure SDLC & DevSecOps:** Implement Secure Software Development Lifecycle practices, embed security controls and automated testing into CI/CD pipelines, integrate security requirements from design through deployment, and enable secure-by-design application development.
**Cloud & Kubernetes Security:** Develop cloud security posture management capabilities, secure AWS-based environments and cloud-native platforms, improve Kubernetes security through controls and monitoring, and assess cloud security risks with remediation guidance.
**Vulnerability Management:** Support risk-based vulnerability management across applications and infrastructure, analyze findings to determine business risk, establish remediation priorities, and partner with engineering teams on effective remediation.
**Application Security:** Provide application security guidance throughout the development lifecycle, support secure coding practices, act as a trusted security partner on design decisions, and contribute to developer enablement initiatives.
**Security Engineering & Tooling:** Manage and enhance security tooling integrated within development and operational environments, evaluate security platforms, work with tools like GitLab, SonarQube, Mend, Tenable, and Sysdig, and support proof-of-concept activities and security automation.
You will join a multidisciplinary Information Security team that partners closely with Engineering, Platform, and Product teams. The team collectively owns DevSecOps, cloud security, application security, security tooling, and vulnerability management capabilities. You will contribute your expertise, collaborate across disciplines, and drive improvements where your strengths have the greatest impact.
This is not a traditional operational security position. The company seeks someone who combines security expertise with engineering thinking and can help scale secure development practices across the organization.
**Requirements:**
- Proven experience in DevSecOps, Security Engineering, Application Security, or Cloud Security roles
- Strong understanding of modern software development practices and CI/CD pipelines
- Experience securing cloud-native environments, preferably AWS
- Experience with Kubernetes and container security
- Experience implementing security controls within software delivery pipelines
- Strong understanding of vulnerability management processes and remediation workflows
- Good knowledge of application security concepts and OWASP Top 10
- Experience collaborating with engineering teams in advisory, enablement, or security engineering capacity
- Strong stakeholder management and communication skills
- Ability to operate independently and drive initiatives in a global organization
- Pragmatic, solution-oriented approach to security
**Nice to Have:**
- Experience with Cloud Security Posture Management (CSPM) platforms
- Experience with Kubernetes Security Posture Management (KSPM) solutions
- Knowledge of AWS and GCP security best practices
- Experience with GitLab Ultimate
- Experience with Infrastructure as Code and security automation
- Experience in large-scale enterprise organizations
- Experience supporting modern AI-enabled development environments
- Relevant security certifications
The role follows an office-first approach based in Warsaw, with successful candidates expected to work from the Warsaw office five days per week.
