Lead DevSecOps Security Engineer
Sportradar4 days ago
Warsaw, PolandStaff+
Responsibilities
- Implement Secure Software Development Lifecycle practices and embed security controls and automated security testing into CI/CD pipelines.
- Partner with engineering, platform, and development teams to enable secure-by-design application development and improve security awareness.
- Secure AWS-based cloud environments and Kubernetes platforms through controls, monitoring, posture improvements, and remediation guidance.
- Perform risk-based vulnerability management, including analyzing findings, prioritizing remediation, and supporting vulnerability identification, triage, and reporting.
- Provide application security guidance, secure coding recommendations, and security design support throughout the development lifecycle.
- Manage and enhance security tooling, evaluate security platforms, support proof-of-concept activities, and drive platform integrations and security automation.
Requirements
- Proven experience in DevSecOps, Security Engineering, Application Security, or Cloud Security roles.
- Strong understanding of modern software development practices and CI/CD pipelines.
- Experience securing cloud-native environments, preferably AWS, and working with Kubernetes and container security.
- Experience implementing security controls in software delivery pipelines and understanding vulnerability management and remediation workflows.
- Good knowledge of application security concepts and the OWASP Top 10.
- Experience collaborating with engineering teams in an advisory, enablement, or security engineering capacity.
- Strong stakeholder management, communication, independent execution, and initiative-driving skills.
- Preferred qualifications include CSPM or KSPM experience, AWS and GCP security best practices, GitLab Ultimate, infrastructure as code, security automation, large-scale enterprise experience, AI-enabled development environments, and relevant security certifications.
Benefits
- Opportunity to shape and mature DevSecOps capabilities within a global sports technology company.
- Meaningful ownership and influence over security strategy and engineering practices.
- Access to modern cloud, platform, and security technologies.
- Collaborative international environment with engineering and security professionals.
- Continuous learning, professional development, and career growth opportunities.
- Competitive compensation and benefits package.
- Office-first work model based in Warsaw, with five days per week expected in the Warsaw office.
Tech Stack
Categories
About Sportradar
Sportradar builds data, odds, and integrity services that power sportsbooks, iGaming operators, media companies, and sports federations. Its products include real-time sports data feeds, trading tools, virtual sports, integrity monitoring, and digital content, sold via SaaS and data-rights partnerships. Founded in 2001 and headquartered in St. Gallen, the NASDAQ-listed company covers more than a million events annually and works with organizations such as the NBA and UEFA.