DevSecOps Specialist (regular/senior) (She/He/They)

WHO WE ARE: The Cyber Security team, part of Accenture Security, supports organizations in building secure, resilient, and scalable security capabilities across complex enterprise technology landscapes — integrating security into software development, cloud adoption, digital transformation, and technology modernization so that security by design and security by default are reflected in how systems are actually built and operated, not only in policy. We act as trusted advisors to some of the world's leading organizations, helping them define pragmatic security operating models, improve security maturity, and align cybersecurity capabilities with their business and technology objectives. Working at the forefront of the industry means constant exposure to complex, high-stakes security challenges and the latest technologies — across banking, manufacturing, healthcare, retail, and public sector, each with its own regulatory context and technical scale. As part of a global security leader, you work on engagements that span the full breadth of modern enterprise security — from securing AI-enabled systems and cloud-native architectures to embedding security into large-scale digital transformation programmed. The variety of clients, industries, and technology stacks means you are continuously challenged, and the depth of expertise around you means you are never navigating that alone. THE WORK: Design, build, and run secure CI/CD pipelines. Automate the security steps so they scale instead of becoming someone's manual chore — with Ansible, Azure DevOps, Jenkins, GitLab, Argo CD — and integrate scanning tooling such as Snyk, Veracode, Checkmarx, OpenText, or WIZ so that results are trusted and acted on rather than muted. Secure public cloud and container environments. Run security assessments of hybrid solutions, help teams harden Azure, GCP, or AWS and their microservices platforms for compliance and resilience, and support migration and transformation work where security has to move into an entirely new technology layer. Review APIs, source code, and deployment processes in depth to find what is exploitable and get it fixed — then put API security platforms and real-time monitoring in place so the next problem surfaces without anyone going looking. Threat-model applications and design the fix. Analyse how a system could be attacked, propose mitigations the team can realistically ship, and work with design and development teams to embed security from the start of the SDLC. Work on the security of AI-driven systems across their whole lifecycle, from design and development through to deployment — and use AI-driven approaches and tooling to make security work faster than it used to be. Be the person clients take advice from. Act as a trusted advisor on secure design principles and where cloud and application security is heading, and help clients raise their DevSecOps and AppSec maturity with methods that fit how they actually work. Flexible: The work location for this role may include a mix of working remotely, onsite at a client or in an Accenture office - depending on specific project circumstances. With all our roles, there is some in-person time for collaboration, learning and building relationships with clients, peers, leaders, and communities. As an employer, we will be as flexible as possible to support your specific work/life needs. WHAT’S IN IT FOR YOU: Work on international cybersecurity transformation programmes for some of the world's leading organisations, on security problems that are genuinely complex and unsolved at their end — with the support of a team of more than 150 cybersecurity specialists in Poland, and thousands more across the world. Breadth you cannot get in-house. In a single year you see how organisations across banking, manufacturing, healthcare, retail, and public sector approach the same DevSecOps and cloud security challenges — and where they fail. That range takes far longer to accumulate on a single internal team. Constant exposure to emerging technologies, current tooling, and evolving practice — helping clients securely adopt what is new while managing risk across legacy, hybrid, and modern environments. Room to set direction and grow as a trusted advisor. On most engagements you are the person defining what good looks like for a client's pipeline or cloud platform — leading security discussions with technical, operational, and senior stakeholders, not implementing someone else's definition. Collaborate with a diverse team of cybersecurity experts in an environment where ideas are welcome rather than tolerated, focused on innovation, continuous learning, and practical business outcomes. A wide catalogue of development opportunities: technical, soft-skills, and language training, e-learning platforms, GenAI training, and security certifications — open to everyone who wants to grow. HERE’S WHAT YOU’LL NEED: We are looking for candidates with a solid foundation across the areas below. Hands-on experience and a working grasp of the core concepts is the baseline — specialization and depth can be developed from there. A real engineering or IT background. Several years in IT, DevOps, platform engineering, or a related role. You have built, run, or automated systems, and you know what breaks in production because you have been there when it did. Security fundamentals you understand rather than memorized. Confidentiality, integrity, and availability — what they mean for a running system and what breaks them. How applications get attacked: SQL injection, XSS, CSRF, and the classes of problem behind the OWASP Top 10. What encryption, hashing, and secrets management are for and how people misuse them. If you can explain to a developer why a control exists, that is what we mean. Hands-on experience with CI/CD pipelines. At least one system — Azure DevOps, GitLab CI, Jenkins, GitHub Actions, Argo CD, or similar. You have built or maintained pipelines rather than only read about them, and Git is a daily tool rather than a concept. Experience with one public cloud. Azure, GCP, or AWS. One, used in earnest, is worth more here than three from a slide. A basic understanding of containers and orchestration. Docker, and Kubernetes or OpenShift at the level of knowing how a workload gets scheduled, exposed, and given credentials. Enough code to automate and to review. Scripting you can actually write — Python, Bash, or similar — and the ability to read someone else's Java, C#, JavaScript, or Go well enough to reason about what it does and where it goes wrong. You do not need to be a professional developer today. Language requirements. Professional proficiency in both English and Polish is required. English is the primary language for client-facing work — including findings communication, workshop facilitation, and presentations to senior stakeholders. Polish is the language of day-to-day team operations. Proficiency in both is a non-negotiable requirement for this role. Ways of working. Strong communication skills, including the ability to translate complex technical findings into clear, actionable recommendations for non-technical audiences. Curiosity and adaptability — comfortable reading unfamiliar documentation, prototyping something rough to see if it works, and being the person expected to define what "good" looks like in a domain you met three weeks ago. A proactive, ownership-oriented mindset, given the pace of change in the DevSecOps landscape. Seniority levels Regular (approximately 2–5 years of relevant experience). Candidates at this level are expected to independently deliver defined workstreams — building and securing pipelines, integrating and tuning scanning tools, reviewing deployments and cloud configuration, and communicating findings to client technical teams. A working knowledge of the OWASP Top 10 and secure coding principles is expected, with