In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for a DevSecOps Engineer to join our team.

Project information:

• Location: Kraków (Hybrid work model, 5 days per month from the office)
• Remuneration: up to 140 net + VAT per hour on B2B
• Type of employment: B2B contract
• Project language: English

Your tasks:

• Designing and maintaining Groovy-based Jenkins pipeline steps (build, test, package, scan, deploy)
• Extending Python tooling to support:
  • SLSA provenance
  • SBOM generation (CycloneDX)
  • Hash/digest accuracy
  • Aggregation of security scan results (SonarQube, Sonatype IQ, SAST, container scans)
• Optimizing CI/CD performance through:
  • Parallel builds
  • Intelligent caching
  • Dependency prefetching
  • Scope-reduced BOMs
• Ensuring artifact integrity and traceability:
  • Correct SHA1/SHA256 mapping
  • Reproducible inputs
  • Evidence and metadata modeling
• Refactoring legacy pipeline scripts:
  • Removing global state
  • Consolidating hashing logic
  • Standardizing pipeline templates
• Documenting CI standards and best practices 
• Mentoring engineers on secure pipeline development and software supply-chain security
• Troubleshooting, preventing, and resolving CI/CD pipeline incidents