About the Position

Lead DevSecOps Security Engineer

Location: Warsaw, Poland

Employment Type: Full-time

Work Model: On-site

About Us

Sportradar is the world's leading sports technology company, creating immersive experiences for sports fans and bettors through innovation and technology. Our solutions power hundreds of sports organizations, media companies, betting operators, and sports federations worldwide.

At Sportradar, security is a critical enabler of our products, infrastructure, and business operations. As our engineering landscape continues to evolve, we are strengthening our DevSecOps capabilities to ensure security is embedded into every stage of software delivery.

The Challenge

We are looking for a Lead DevSecOps Engineer to join our Information Security organization in Warsaw. This role sits at the intersection of Security, Platform Engineering, and Software Development. You will be responsible for integrating security controls into engineering workflows, enabling developers to build securely, improving cloud and Kubernetes security posture, and driving risk-based vulnerability management across our technology landscape.

Responsibilities

Secure SDLC & DevSecOps
- Contribute to the implementation of Secure Software Development Lifecycle practices across engineering teams.
- Help embed security controls and automated security testing into CI/CD pipelines.
- Help ensure security requirements are integrated into development processes from design through deployment.
- Partner with engineering teams to enable secure-by-design application development.
- Support security automation and continuous improvement across software delivery pipelines.
Cloud & Kubernetes Security
- Support the development and enhancement of cloud security posture management capabilities.
- Work with engineering teams to secure AWS-based environments and cloud-native platforms.
- Contribute to improving Kubernetes security posture through the implementation of security controls, monitoring, and best practices.
- Assess cloud security risks and provide practical remediation guidance.
Vulnerability Management
- Support risk-based vulnerability management activities across applications and infrastructure.
- Analyse vulnerability findings, determine business risk, and establish remediation priorities.
- Partner with engineering teams to ensure vulnerabilities are remediated effectively and within agreed timelines.
- Contribute to scalable processes for vulnerability identification, triage, and reporting.
Application Security
- Contribute application security guidance throughout the development lifecycle.
- Support engineering teams with secure coding practices and remediation recommendations.
- Work as a trusted security partner on security design decisions and implementation approaches.
- Contribute to security awareness and developer enablement initiatives.
Security Engineering & Tooling
- Contribute to the management and enhancement of security tooling integrated within development and operational environments.
- Evaluate existing and future security platforms and identify opportunities for optimization.
- Work with tools and technologies such as GitLab, SonarQube, Mend, Tenable, Sysdig, and related solutions.
- Support proof-of-concept activities, platform integrations, and security automation initiatives.

Requirements

Proven experience working in DevSecOps, Security Engineering, Application Security, or Cloud Security roles.
Strong understanding of modern software development practices and CI/CD pipelines.
Experience securing cloud-native environments, preferably AWS.
Experience working with Kubernetes and container security.
Experience implementing security controls within software delivery pipelines.
Strong understanding of vulnerability management processes and remediation workflows.
Good knowledge of application security concepts and the OWASP Top 10.
Experience collaborating with engineering teams in an advisory, enablement, or security engineering capacity.
Strong stakeholder management and communication skills.
Ability to operate independently and drive initiatives forward in a global organization.
A pragmatic, solution-oriented approach to security.

Nice to Have

Experience with Cloud Security Posture Management (CSPM) platforms.
Experience with Kubernetes Security Posture Management (KSPM) solutions.
Knowledge of AWS and GCP security best practices.
Experience with GitLab Ultimate.
Experience with Infrastructure as Code and security automation.
Experience in large-scale enterprise organizations.
Experience supporting modern AI-enabled development environments.
Relevant security certifications.

We Offer

The opportunity to shape and mature DevSecOps capabilities within one of the world's leading sports technology companies.
Meaningful ownership and the ability to influence security strategy and engineering practices.
Access to modern cloud, platform, and security technologies.
A collaborative international environment working with highly skilled engineering and security professionals.
Continuous learning and professional development opportunities.
Competitive compensation and benefits package.
Career growth opportunities within a global technology organization.

About the Company

Sportradar is an Equal Opportunity Employer. We are committed to fostering an inclusive environment where everyone can contribute, grow, and succeed regardless of race, ethnicity, nationality, religion, gender, gender identity or expression, sexual orientation, age, disability status, or any other characteristic protected by applicable law.

We believe diverse perspectives create stronger teams, better innovation, and better outcomes for our employees, customers, and partners.

Diversity, Equity, Inclusion & Belonging

At Sportradar, we celebrate our diverse group of hardworking employees. Sportradar is committed to ensuring equal access to its programs, facilities, and employment opportunities. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. We encourage you to apply even if you only meet most of the requirements (but not 100% of the listed criteria) – we believe skills evolve over time. If you’re willing to learn and grow with us, we invite you to join our team!

Lead DevSecOps Security Engineer

Job description