freehire launches on Product Hunt on 26 August.

Follow →

HSBCJP00057599 (Cybersecurity) DevSecOps Security Consultant

Open 22d

Senior Cybersecurity SME / DevSecOps Consultant

We are looking for an experienced Senior Cybersecurity SME / Consultant to support the security maturity of engineering platforms, CI/CD ecosystems, cloud infrastructure, and developer tooling within a large-scale regulated environment.

This role combines cybersecurity consulting, DevSecOps, platform security, and stakeholder engagement across global engineering teams.

Hybrid working: 6 days a month at the office in Kraków

Responsibilities

  • Conduct security assessments of CI/CD pipelines, build systems, runtime environments, and developer platforms
  • Perform threat modelling, gap analysis, and identify security risks across engineering ecosystems
  • Define secure engineering standards, security baselines, and policy-as-code controls
  • Support implementation of secure-by-design practices across cloud and platform environments
  • Drive security improvements related to:
    • vulnerability management
    • software supply chain security
    • SBOM
    • code-signing
    • artifact integrity
    • access and configuration security
  • Build and support security roadmaps with engineering and platform teams
  • Act as a trusted advisor for engineering leadership and security stakeholders

Requirements

  • Strong experience in Cybersecurity, DevSecOps, Platform Security, or Security Engineering roles
  • Deep understanding of:
    • CI/CD pipelines
    • cloud-native platforms
    • Kubernetes/container environments
    • developer tooling and runtime infrastructure
  • Hands-on experience with:
    • threat modelling
    • security assessments
    • vulnerability management
    • secure SDLC / DevSecOps practices
  • Experience with AWS, Azure and/or GCP
  • Strong knowledge of application security, cloud security, network security, and security automation
  • Experience working in enterprise or regulated environments
  • Strong communication and stakeholder management skills

Nice to Have

  • Experience with SLSA, SBOM, supply chain security
  • Security certifications such as:
    • CISSP
    • CISM
    • CCSP
  • Financial services or fintech background preferred

Why join:

  • Work in a global, forward-thinking cybersecurity environment
  • Real influence on cloud security strategy and standards
  • Flexible working model and strong career growth opportunities
  • Working under a B2B contract or an employment contract with Antal

See also