Lead DevSecOps Security Engineer
Sportradar is seeking a Lead DevSecOps Security Engineer to join its Information Security organisation in Warsaw. This role operates at the intersection of security, platform engineering, and software development, focusing on embedding security controls into engineering workflows to enable secure development practices.
The successful candidate will work closely with platform, central engineering, and development teams to ensure security is a seamless part of the software development lifecycle. This position requires a blend of security expertise and engineering thinking to help scale secure development practices across the organisation.
- Contribute to the implementation of secure software development lifecycle practices across engineering teams.
- Embed security controls and automated security testing into CI/CD pipelines.
- Ensure security requirements are integrated into development processes from design through deployment.
- Partner with engineering teams to enable secure-by-design application development.
- Support security automation and continuous improvement across software delivery pipelines.
- Support the development and enhancement of cloud security posture management capabilities.
- Work with engineering teams to secure AWS-based environments and cloud-native platforms.
- Improve Kubernetes security posture through the implementation of security controls, monitoring, and best practices.
- Assess cloud security risks and provide practical remediation guidance.
- Support risk-based vulnerability management activities across applications and infrastructure.
- Analyse vulnerability findings, determine business risk, and establish remediation priorities.
- Partner with engineering teams to ensure vulnerabilities are remediated effectively and within agreed timelines.
- Contribute to scalable processes for vulnerability identification, triage, and reporting.
- Contribute application security guidance throughout the development lifecycle.
- Support engineering teams with secure coding practices and remediation recommendations.
- Act as a trusted security partner on security design decisions and implementation approaches.
- Contribute to security awareness and developer enablement initiatives.
- Manage and enhance security tooling integrated within development and operational environments.
- Evaluate existing and future security platforms and identify opportunities for optimisation.
- Work with tools and technologies such as GitLab, SonarQube, Mend, Tenable, Sysdig, and related solutions.
- Support proof-of-concept activities, platform integrations, and security automation initiatives.
- Proven experience working in DevSecOps, Security Engineering, Application Security, or Cloud Security roles (required).
- Strong understanding of modern software development practices and CI/CD pipelines (required).
- Experience securing cloud-native environments, preferably AWS (required).
- Experience working with Kubernetes and container security (required).
- Experience implementing security controls within software delivery pipelines (required).
- Strong understanding of vulnerability management processes and remediation workflows (required).
- Good knowledge of application security concepts and the OWASP Top 10 (required).
- Experience collaborating with engineering teams in an advisory, enablement, or security engineering capacity (required).
- Strong stakeholder management and communication skills (required).
- Ability to operate independently and drive initiatives forward in a global organisation (required).
- A pragmatic, solution-oriented approach to security (required).
- Experience with Cloud Security Posture Management (CSPM) platforms (nice-to-have).
- Experience with Kubernetes Security Posture Management (KSPM) solutions (nice-to-have).
- Knowledge of AWS and GCP security best practices (nice-to-have).
- Experience with GitLab Ultimate (nice-to-have).
- Experience with Infrastructure as Code and security automation (nice-to-have).
- Experience in large-scale enterprise organisations (nice-to-have).
- Experience supporting modern AI-enabled development environments (nice-to-have).
- Relevant security certifications (nice-to-have).
- The opportunity to shape and mature DevSecOps capabilities within a leading sports technology company.
- Meaningful ownership and the ability to influence security strategy and engineering practices.
- Access to modern cloud, platform, and security technologies.
- A collaborative international environment working with highly skilled engineering and security professionals.
- Continuous learning and professional development opportunities.
- Competitive compensation and benefits package.
- Career growth opportunities within a global technology organisation.
Sportradar is a global sports technology company that collects, analyses and distributes sports data to betting operators, sports leagues and media companies. Headquartered in St. Gallen, Switzerland, and founded in 2001, it provides betting services, managed trading, integrity monitoring and audiovisual streaming across hundreds of sports. The company holds official data partnerships with organisations including the NBA, NHL, FIFA and ICC. Sportradar is listed on the Nasdaq stock exchange and employs several thousand people worldwide.
