W skrócie
- Zadania: Zarządzaj bezpieczeństwem w cyklu życia oprogramowania i współpracuj z zespołem IT.
- Firma: Dynamiczna firma technologiczna z kulturą współpracy.
- Benefity: Elastyczny grafik, 28 dni płatnego urlopu, ubezpieczenie zdrowotne.
- Pozostałe informacje: Możliwość pracy zdalnej lub w biurze w Kijowie, Lwowie lub Warszawie.
- Dlaczego ta praca: Pracuj z nowoczesnymi technologiami i wpływaj na bezpieczeństwo projektów.
- Kwalifikacje: Doświadczenie w zarządzaniu bezpieczeństwem i umiejętności programistyczne.
Przewidywane wynagrodzenie mieści się w przedziale 90000 - 110000 zł za rok.
# Dev Sec Ops | Web Tech27 JUL 2026Remote Permanent Tech & Product Visit Site Apply Now Dev Sec Ops | Web Tech We are looking for a Dev Sec Ops to join Boosta’s service team, which provides design, development, content, and IT infrastructure creation & support services for the holding’s projects.
Remote Full-time | Dev Ops Apply job description As a Dev Sec Ops, you will: Vulnerability Management — full lifecycle (core responsibility) Detect vulnerabilities across all layers: code, dependencies, container images, Ia C, configurations, and network.
Prioritize vulnerabilities based on real risk (exploitability + exposure), not only CVSS.
Perform hands-on remediation: dependency upgrades, patching, configuration hardening, and code changes through pull requests together with developers.
Verify remediation (re-scan / re-test), track SLA compliance, and prevent regressions.
Implement Security into CI/CD Deploy and integrate SAST, DAST, SCA, and secret scanning into CI/CD pipelines.
Configure security gates to block deployments on critical findings and manage exceptions with assigned risk owners.
Network Security & Architecture Implement segmentation, firewall policies, zero-trust access, VPN, egress filtering, and IMDS protection.
Work with edge/WAF (Cloudflare): tune rules, anti-bot protection, and rate limiting for payment and gaming APIs.
Review network architecture and perimeter security to identify dangerous exposures.
Cloud & Infrastructure Security Assess and harden cloud and bare-metal infrastructure.
Perform Ia C scanning (Terraform / Helm / Kubernetes) for insecure configurations.
Manage secrets and secret rotation (Vault / cloud secrets), eliminate hardcoded credentials.
Harden IAM / SSO (OIDC/SAML, Keycloak).
SIEM & Detection Engineering Build and maintain logging and audit pipelines, detection-as-code, and correlation rules (ELK-like solutions).
Collaborate closely with the SOC team by providing detections for new findings instead of duplicating their work.
Containers & Orchestration Scan container images (Trivy / Grype), implement RBAC and least privilege principles, configure network policies, runtime detection (Falco), and harden base images.
Secure SDLC & Security Culture Conduct threat modeling during planning and participate in security design reviews.
Mentor developers on secure coding practices (OWASP Top 10 / ASVS).
We value specialists who: Have a deep understanding of network security and architecture: segmentation, firewalls, VPN, m TLS, TLS, DNS, zero-trust, and traffic analysis.
Have hands-on experience with SIEM solutions, including log collection, detection rule creation, and investigations (Wazuh / ELK / similar).
Have strong expertise in cloud and infrastructure security, including hardening, IAM, Ia C scanning, and secrets management, with confident knowledge of at least one cloud platform (GCP / AWS / Azure) and experience with bare-metal environments.
Have practical experience in vulnerability management and remediation, including patching, upgrades, configuration, and code fixes.
Have implemented SAST, DAST, SCA, and secret scanning solutions from scratch and integrated them into CI/CD pipelines (Sonar Qube, Semgrep, Snyk, Trivy, OWASP ZAP, gitleaks/detect-secrets, or similar).
Are proficient in Python and Bash (Go will be a plus) for automation and remediation tasks.
Have experience working with Git Lab CI, Git Hub Actions, Jenkins, or Team City.
Have practical knowledge of Docker and Kubernetes.
Do you want to know some details about this position?Anna will help!more detailswork YOUR JOURNEY WITH US: Step 1.
Pre-screen.
Step 2.
Technical interview.
Step 3.
Interview.
Step 4.
Reference check.
Step 5.
Job Offer!Support for your career growth: compensation for external courses and conferences, access to our corporate library.
Flexible schedule: you can start your working day anytime between 8:00–11:00 Kyiv time.
Work location of your choice: Kyiv office, coworking in Lviv or Warsaw, or fully remote.28 working days of paid vacation per year, up to 30 days of sick leave with medical confirmation, plus all state holidays.
Care for your health: medical insurance and compensation for psychologist sessions.
Social initiatives: Ukrainian Victory Support program and other important projects.
Regular team-building activities, online or offline.
What you’ll get from working with us: #J-18808-Ljbffr
DevSecOps in Warsaw – pracodawca: Igbaffiliate
iGamingNuts to doskonały pracodawca, który stawia na rozwój swoich pracowników oraz przyjazną atmosferę pracy. Oferujemy nowoczesne biuro w sercu Gdańska, elastyczne godziny pracy oraz liczne benefity, takie jak karta multisport, wspólne wyjścia integracyjne i dodatkowy dzień wolny w miesiącu urodzin. Nasza kultura pracy opiera się na wsparciu zespołowym i równowadze między życiem zawodowym a prywatnym, co czyni nas idealnym miejscem dla osób pragnących rozwijać się w branży bukmacherskiej.
