DevSecOps Engineer
Camlin Group7 months ago
Kraków, PolandSenior
Responsibilities
- Execute ISMS-defined secure development, vulnerability-management, and compliance workflows across embedded and backend systems.
- Operate SCA, SAST, and DAST tools and prepare vulnerability reports aligned with CRA and IEC 62443 requirements.
- Perform or coordinate grey-box and white-box security testing for firmware and backend releases.
- Generate SBOMs and OSS license-compliance reports for CRA transparency and supply-chain documentation.
- Maintain firmware-signing pipelines, certificate provisioning, key-management tools, and secure device-onboarding workflows.
- Support secure manufacturing processes including device identity injection and protected configuration handling.
- Own and improve factory self-tests, diagnostics, manufacturing infrastructure, dashboards, metrics, alerting, and monitoring.
- Maintain and develop manufacturing databases, schema versioning, APIs, queries, and performance.
- Maintain secure and reproducible CI/CD build, release, provisioning, signing, and deployment workflows for firmware and backend services.
Requirements
- Familiarity with SCA, SAST, and DAST tools such as SonarQube and JFrog XRay.
- Understanding of SBOM standards including CycloneDX and SPDX.
- Programming experience with Python and Node.js.
- Experience with SQL databases and API design, plus an understanding of database architecture.
- Practical knowledge of Grafana, Prometheus, and Loki for monitoring and observability.
- Ability to maintain and troubleshoot factory automation systems and backend services.
- Experience with Embedded Linux and Yocto.
- Understanding of embedded-systems cybersecurity principles and CRA, RED, and IEC 62443 concepts.
- Willingness to execute ISMS-defined secure SDLC, vulnerability-management, and incident-support processes.
- Familiarity with TLS, certificate pinning, and encrypted transport layers.
- GitLab CI/CD pipeline development and additional Node.js experience are desirable.
Benefits
- Employment contract with competitive salary.
- Hybrid and remote-friendly work model with an office in Kraków; at least one selection-process interview must be onsite.
- Company pension and life assurance schemes.
- On-site parking for cars and bikes.
- UoP employment with 80% author’s rights tax relief.
- MyBenefit system with Multisport membership and private Medicover healthcare.
- Wellness programmes.
About Camlin Group
Camlin Group builds monitoring and analytics systems for electricity grids and rail infrastructure, combining sensors, embedded devices, and software to improve asset performance and reliability. It sells hardware, software, and support services under brands such as Camlin Energy and Camlin Rail to utilities and rail operators. The company is privately held and headquartered in Lisburn, Northern Ireland.