DevSecOps Engineer

At Infotree, meeting your career needs is a top priority. Client satisfaction is largely dependent on the resources we can provide, and we take pride in our delivery. We have a supportive team in place to give quality people a chance to grow and challenge themselves in their roles which has resulted in that we have placed many employees in positions that have grown into lifelong careers.

We have a team of dedicated recruiters and consultant care representatives that are committed to your success and well-being. Check out our open roles to get started.

Infotree Poland Sp. z o.o. is part of Infotree Global Solutions. Agency number : 15970.

We are seeking a DevSecOps Engineer to join our client’s team and enhance the security of software supply chains. This role focuses on custom Software Bill of Materials generation , a critical tool for tracking components, ensuring compliance, and mitigating vulnerabilities. With SBOMs now mandatory for US government software suppliers, this work sets industry standards.

As part of the Software Development Life Cycle team , you will integrate third-party tooling with in-house systems to strengthen software security. The team leads efforts in composition analysis, vulnerability detection, and component traceability , ensuring robust protection throughout the development process.

What You Will Do :

• Design and build systems to secure the entire software supply chain.
• Develop and integrate systems for third-party vulnerability detection across libraries, OS components, and containers.
• Work with GitLab, CI / CD pipelines, and build attestation to ensure security at every stage of development.
• Collaborate with infrastructure and security teams to drive improvements in software security.
• Partner with developers to embed security solutions into their workflows

Skills and Experience We Are Looking For :

Why Join This Opportunity?

Ready to make an impact? Apply today.