DevSecOps Engineer
Camlin Group6 months ago
Kraków, PolandSenior
Responsibilities
- Execute ISMS-defined secure development, vulnerability-management, and compliance workflows across embedded and backend systems.
- Operate SCA, SAST, and DAST tools and prepare vulnerability reports aligned with CRA and IEC 62443 requirements.
- Perform or coordinate grey-box and white-box security testing for firmware and backend releases.
- Generate SBOMs and OSS license-compliance reports for CRA transparency and supply-chain documentation.
- Maintain firmware-signing pipelines, certificate provisioning, key-management tools, and secure device-onboarding workflows.
- Support secure manufacturing processes including device identity injection and protected configuration handling.
- Own and improve factory self-tests, diagnostics, manufacturing infrastructure, dashboards, metrics, alerting, and monitoring.
- Maintain and develop manufacturing databases, schema versioning, APIs, queries, and performance.
- Maintain secure and reproducible CI/CD build, release, provisioning, signing, and deployment workflows for firmware and backend services.
Requirements
- Familiarity with SCA, SAST, and DAST tools such as SonarQube and JFrog XRay.
- Understanding of SBOM standards including CycloneDX and SPDX.
- Programming experience with Python and Node.js.
- Experience with SQL databases and API design, plus an understanding of database architecture.
- Practical knowledge of Grafana, Prometheus, and Loki for monitoring and observability.
- Ability to maintain and troubleshoot factory automation systems and backend services.
- Experience with Embedded Linux and Yocto.
- Understanding of embedded-systems cybersecurity principles and CRA, RED, and IEC 62443 concepts.
- Willingness to execute ISMS-defined secure SDLC, vulnerability-management, and incident-support processes.
- Familiarity with TLS, certificate pinning, and encrypted transport layers.
- GitLab CI/CD pipeline development and additional Node.js experience are desirable.
Benefits
- Employment contract with competitive salary.
- Hybrid and remote-friendly work model with an office in Kraków; at least one selection-process interview must be onsite.
- Company pension and life assurance schemes.
- On-site parking for cars and bikes.
- UoP employment with 80% author’s rights tax relief.
- MyBenefit system with Multisport membership and private Medicover healthcare.
- Wellness programmes.