technologies-expected

Expected, C++, DevSecOp, embedded systems, security, SAST, CMake

Opis stanowiska

About the project, This project is directly focused on achieving compliance with the Cyber Resilience Act (CRA), a strategic priority for the organization. The role involves designing and implementing scalable security mechanisms across a broad product portfolio, including embedded systems, ensuring regulatory compliance and long-term maintainability of solutions., , The initiative spans multiple products, legacy codebases, heterogeneous build environments, and numerous repositories, requiring pragmatic and scalable security solutions., , Key Challenges, Implementing security measures in existing legacy systems (non-greenfield)., Balancing CRA regulatory compliance with engineering pragmatism., Delivering scalable, auditable, reusable, and maintainable solutions.

Twoje zadania

Your responsibilities, Design, implement, and maintain scalable security workflows across multiple products and repositories., Translate legal and regulatory requirements (CRA) into actionable technical solutions., Implement and scale DevSecOps practices, including SAST, SCA, and SBOM generation., Integrate security tools (e.g., Veracode, CodeSonar) into CI/CD pipelines., Build and maintain centralized vulnerability management systems, including vulnerability databases and waiver management., Ensure full traceability for audits and consistent risk management practices., Collaborate across multiple teams to ensure end-to-end ownership of security solutions., Work in complex, heterogeneous, and legacy environments with limited automation., Optionally contribute to AI-assisted vulnerability remediation workflows and semi-automated

Wymagania

Experienced engineer with strong technical security expertise and DevOps / DevSecOps skills., Proven experience working with security or product compliance regulations., Ability to translate legal requirements into technical implementations., Programming: C/C++, DevOps / CI/CD pipelines (GitHub, GitLab, GitHub Actions, AWS), Security practices: application and product security, code analysis, Tools: SAST, SCA, SBOM generation, Veracode, CodeSonar, CI/CD automation, Build environments: CMake, Make, vendor-specific solutions, integration of security tools into custom pipelines, Previous role in DevSecOps or similar security-focused engineering position., Experience with embedded systems and long-lifecycle products., Ability to operate at scale: multiple teams, repositories, and products., Strong ownership mentality with end-to-end solution delivery.

Wymagania

Optional, High level of independence and decision-making authority., Pragmatic approach balancing regulatory compliance, engineering efficiency, and scalability., Ability to operate in heterogeneous, legacy environments with minimal standardization.

work-organization-work-style

This is how we work, at the client's site

development-practices

This is how we work on a project, Continuous Deployment, Continuous Integration, DevOps

Opis stanowiska

SQUARE ONE RESOURCES sp. z o.o., At Square One Poland we link IT experts with the business. With over 25 years of experience, we specialize in recruitment processes on a global scale. Despite years of experience, we still have a startup DNA and this is our advantage. Our offices are located in London and Warsaw, however, we can reach clients from all over the world, from start-ups to big worldwide corporations.

Opis stanowiska

This is how we work,

Opis stanowiska

This project is directly focused on achieving compliance with the Cyber Resilience Act (CRA), a strategic priority for the organization. The role involves designing and implementing scalable security mechanisms across a broad product portfolio, including embedded systems, ensuring regulatory compliance and long-term maintainability of solutions.

The initiative spans multiple products, legacy codebases, heterogeneous build environments, and numerous repositories, requiring pragmatic and scalable security solutions.

Key Challenges

Implementing security measures in existing legacy systems (non-greenfield).

Balancing CRA regulatory compliance with engineering pragmatism.

Delivering scalable, auditable, reusable, and maintainable solutions.

Twoje zadania

Design, implement, and maintain scalable security workflows across multiple products and repositories.
Translate legal and regulatory requirements (CRA) into actionable technical solutions.
Implement and scale DevSecOps practices, including SAST, SCA, and SBOM generation.
Integrate security tools (e.g., Veracode, CodeSonar) into CI/CD pipelines.
Build and maintain centralized vulnerability management systems, including vulnerability databases and waiver management.
Ensure full traceability for audits and consistent risk management practices.
Collaborate across multiple teams to ensure end-to-end ownership of security solutions.
Work in complex, heterogeneous, and legacy environments with limited automation.
Optionally contribute to AI-assisted vulnerability remediation workflows and semi-automated

Security & DevSecOps Engineer – Cyber Resilience Act (CRA) Compliance

Square One Resources