Mid DevSecOps

Hi,

We’re a 30-person DevOps team (we call ourselves a “DevOps house”, not an agency). Below you’ll find what we’re looking for and who we are, so you can decide if we’re what you’re looking for too. 😉

Sounds interesting, but you have questions? Email: [email protected]

About the role:

• We work with clients from startups to companies like World, AirHelp, TACEO, and SmartRecruiters. Our projects are infrastructure that actually has to work – there’s no room for “almost works”.
• In this role you’ll join the platform security team of one of our clients, a global SaaS platform. You’ll be part of their day-to-day work, with the whole Let’s Go DevOps team behind you – people to brainstorm with, ask, and grow with.
• You’ll build and improve security controls across cloud infrastructure: hardening, IAM, network exposure, secrets, container and Kubernetes security.
• You’ll help turn a long list of security findings into a clear process: who owns what, what gets fixed first, and what’s an accepted risk (with a reason, not a shrug).
• You’ll work closely with infrastructure teams – you design the controls and standards, they roll them out. So you need to be good at convincing people, not just at pointing out problems.
• You’ll automate the boring parts. If you do something manually twice, you’ll want to script it the third time.
• We’re 100% remote.

Who we’re looking for:

Required skills:

• 3+ years of experience in cloud infrastructure, with hands-on security work (cloud security, platform security, DevSecOps, or a DevOps role where security was your thing).
• Practical AWS experience – not about certificates, it’s about knowing how it works in practice.
• Kubernetes and Linux – you know them, use them, understand what can go wrong security-wise.
• IAM, network security, hardening, and vulnerability management – you’ve done more than read about them.
• Infrastructure as Code (Terraform) and CI/CD – security should live in the pipeline, not in a PDF.
• Scripting and automation – Python or Bash, Golang is a plus.
• You can look at a security issue, judge how serious it really is, and turn it into concrete work for someone.
• Polish C1 and English min. B2 (we work with international clients).

Nice to have:

• Experience with CSPM / CNAPP tools.
• Cloudflare, WAF, or bot protection.
• SIEM and security monitoring stacks.
• Exposure to audits, compliance, or preparing security evidence.
• Open-source security tooling.
• AWS security certifications (nice to have, but not required).

If you don’t meet all requirements, we encourage you to apply anyway – it’s always worth a shot!

You meet all requirements and then some, so you’re interested in a higher budget offer? Apply! We’re open to negotiation.

What we offer:

• 100% remote work.
• Negotiable salary if you’re really good.
• Health insurance with PZU, fully covered by Let’s Go DevOps.
• PZU Sport card.
• Development budget (courses, conferences, certifications – you decide).
• Equipment budget.

We’re waiting for your application!