{"id":2111760,"url":"https://alion.io/job/mindbox-devsecops-security-consultant","title":"DevSecOps Security Consultant","company":{"id":53456,"name":"Mindbox","domain":"mindboxgroup.com","url":"https://alion.io/company/mindbox","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":{"grade":"A","score":87,"open_postings":71,"ghost_share":0,"stale_share":0.493,"repost_share":0.028,"time_to_fill_p50_days":53,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":106000,"period":"year","method":"role_country_seniority_unknown","sample_n":153},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"SBOM","optional":false},{"name":"SLSA","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-05-05T11:08:37Z","employer_posted_date":"2026-05-05","last_verified_at":"2026-10-17T18:17:54Z","board_verified":true,"closed_at":null,"days_open":165,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":164},"description":"At Mindboxwe connect top IT talents with technology projects for leading enterprises across Europe.\nJoin our client’s team as a DevSecOps Security Consultant!\nAre you passionate about cybersecurity, engineering excellence, and DevSecOps practices? We are looking for an experienced DevSecOps Security Consultant to shape the security posture of engineering platforms at one of the world’s leading financial institutions. This is your opportunity to define scalable security frameworks, uplift maturity across CI/CD platforms, and enable secure digital delivery at enterprise scale.\nSounds like your kind of challenge?\n#LI- Hybrid - 6 days a month from the office in Kraków\nResponsibilities\n Flexible cooperation model - choose the form that suits you best(B2B, employment contract, etc.)\n\nHybrid work setup - 6 days a month from the office in Kraków\nCollaborative team culture - work alongside experienced professionals eager to share knowledge \nContinuous development - access to training platforms and growth opportunities \nComprehensive benefits - including Interpolska Health Care, Multisport card, Warta Insurance, and more \nHigh quality equipment - laptop and essential software provided \nRequirements\nFramework & Assessment:Develop an Engineering-Platform Cybersecurity Maturity Framework for standardized assessments.\nConduct security assessments of CI/CD pipelines, runtime environments, build infrastructures, and developer tools against the framework.\nPerform threat modeling, gap analysis, and identify systemic vulnerabilities impacting code integrity and workload security.\n\nEngineering Platform Security Enablement:Define and enforce secure architecture patterns, policy-as-code, and automated security controls.\nPartner with platform owners to remediate critical gaps and implement scalable solutions for secure artifact integrity, access management, and configuration hardening.\nIntegrate vulnerability management, SBOM generation, provenance, and code-signing into DevOps workflows.\n\nStrategic Roadmap:Build security roadmaps balancing quick wins and long-term improvements.\nPrioritize initiatives based on business risk and compliance requirements.\n\nGovernance & Stakeholder Management:Serve as a trusted cybersecurity advisor to platform owners, engineering teams, and senior leadership.\nInfluence adoption of secure engineering practices across federated teams.\n\nContinuous Improvement:Track maturity metrics and drive measurable security improvements.\nEvolve frameworks based on emerging threats, technology shifts, and regulatory changes.\n\nNote:Detailed project information will be shared during the recruitment process.\nBenefits\nCore Expertise:Proven experience in Cybersecurity within large, regulated organizations.\nDeep understanding of CI/CD systems, build tools, artifact repositories, runtime environments, and developer tools.\nAdvanced knowledge of DevSecOps practices, including pipeline security and automation of security controls.\nExperience in threat modeling, platform-level security assessments, and security gap remediation.\nFamiliarity with cryptography, vulnerability management, and application/network security.\n\nLeadership & Influence:Strong skills in stakeholder management and driving alignment across distributed technology teams.\nAbility to articulate technical risk in business language.\n\nPreferred:Certifications such as CISSP, CISM, CCSP, CCSK.\nKnowledge of Cloud Security (AWS, GCP, Azure) and container orchestration (Kubernetes).\nExperience with supply chain security frameworks (SLSA, SBOM) and secure developer tooling.\n\nJoining this project you’llbecome part of Mindbox - a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’llback you up every step of the way, accelerate your development, and ensure your skills make a difference.","description_format":"text","description_chars":3847,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Hybrid work"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Workflow & Process Automation (RPA, BPM)","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-08T22:38:06Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.304,"p_room":0.28,"age_days":164,"expected_fill_days":53,"reasons":["conf:0","urgency","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/mindbox-devsecops-security-consultant","json_url":"https://alion.io/job/mindbox-devsecops-security-consultant.json","meta":{"generated_at":"2026-10-17T21:17:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5847,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53456},"rest":"https://alion.io/mcp/rest/get_company?id=53456"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmindbox-devsecops-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmindbox-devsecops-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmindbox-devsecops-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mindbox-devsecops-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmindbox-devsecops-security-consultant"}]}