DevSecOps Engineer

Expected

Optional

Operating system

In this project, you will take ownership and actively develop our Jenkins Shared Library, powering multi-language builds including Java/Maven, Node/NPM, Python, Helm, Terraform, and containers. You will design and deliver fast, secure, and provenance-rich CI/CD pipelines, implementing best practices for supply-chain security (SLSA, SBOM, digests) and ensuring integrity across multiple teams. The role offers opportunities to optimize and scale build processes, improve automation, and mentor other engineers on secure and efficient pipeline development. You will be part of a collaborative, agile team with a strong focus on reliability, performance, and modern DevSecOps practices.

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Optional

This is how we work

• Continuous Deployment
• Continuous Integration
• DevOps
• documentation
• issue tracking tools
• testing environments

• development budget
• external training
• industry-specific e-learning platforms
• intracompany training

• We are open to the employment form according to your preferences
• Work with experienced and engaged team, willing to learn, share knowledge and open for growth and new ideas
• Hybrid working system (Warsaw/Cracow)
• Mindbox is a dynamically growing IT company, but still not a large one – everybody can have a real impact on where we are going next
• We invest in developing skills and abilities of our employees
• We have attractive benefits and provide all the tools required for work f.e.computer
• Interpolska Health Care, Multisport, Warta Insurance, training platform (Sages)

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

• Spotkanie wstępne (online, ok. 1h)
• Spotkanie techniczne (online, ok. 1h)

• If these details sound interesting to you and youre eager to gain new experience in the global arena, we invite you to apply. Id be happy to engage in a conversation and invite you to the recruitment process!

Mindbox Sp. z o.o.