DevSecOps Engineer @ Mindbox Sp. z o.o. v Česko

Odpovědnosti

1. Design and maintain Groovy pipeline steps for build, test, package, scan, and deploy workflows.
2. SLSA provenance and SBOM generation
3. Hash/digest validation
4. Security scan aggregation (SonarQube, Sonatype IQ, SAST, Container scans)
5. Optimize pipeline performance (parallel builds, caching, reduced BOM scope, dependency prefetch).
6. Guarantee artifact integrity through SHA1/SHA256 mapping and evidence modeling.

O pozici / o projektu

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

Are you passionate about secure, high-performance CI/CD systems and cutting-edge DevSecOps practices? We are looking for a DevSecOps Engineer to own and evolve our Jenkins Shared Library, which powers multi-language builds including Java/Maven, Node/NPM, Python, Helm, Terraform, and container images.

Your work will strengthen supply-chain integrity, deliver secure, provenance-rich pipelines (SLSA, SBOM, digests), and ensure a seamless developer experience across teams.

Sounds like your kind of challenge? 

#LI-Hybrid

What you get in return

• Flexible cooperation model – choose the form that suits you best
  (B2B, employment contract, etc.)
• Hybrid work setup – 6 days per month in the office in Kraków 
• Collaborative team culture – work alongside experienced professionals eager to share knowledge 
• Continuous development – access to training platforms and growth opportunities 
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more 
• High quality equipment – laptop and essential software provided 

Detail pracovní nabídky

• Hybridní práce

Zaměstnavatel nabízí následující model hybridní práce:

6x/msc