DevSecOps Service Owner

Toyota is a strong, global brand and one of the world’s leading automotive manufacturers. Teams at Toyota Motor Europe and Toyota Motor Manufacturing Poland in Lower Silesia are all working togther to deliver the best mobility solutions for users around the world. Our Digital Hub is Toyota Motor Europe’s IT research and development centre, established in 2026 in Wrocław. We are responsible for developing and maintaining software and connected digital services for the Toyota and Lexus brands in Europe. Become part of our team and help us shape the future. Role Summary: The DevSecOps Service Owner is accountable for the strategy, reliability, security, and continuous improvement of the organization’s DevSecOps platform and services. This role ensures secure-by-design software delivery by embedding security controls, automation, and governance across the SDLC. The Service Owner balances platform reliability, developer experience, risk reduction, and cost efficiency while partnering closely with Engineering, Security, and Operations teams. Formal Role Details: Location : Wrocław, Plac Konstytucji 3 Maja 3 Employment Type: Permanent Working Pattern : Hybrid -2 to 3 days per week in the office, with flexibility for travel to Head Office in Brussels Language Requirements : Professional proficiency in English is essential. What we can offer you: Depending on the candidate’s skills and experience, the base salary for this position will be in the range of PLN 18 000- 25 000 gross per month under a permanent employment contract (employment contract/UoP). Benefits & Bonuses: Annual Bonus Health insurance Sport card Lunch subsidy Car leasing Languages lessons How to Join Us? 1. Submit your application – you can do it right now! 2. Wait to hear from us – if your application is positively reviewed, we’ll invite you to a recruitment interview. This will be an opportunity for you to learn more about our company and for us to get to know you better. 3. We look forward to receiving your application. Click the “Apply” button to access the application form. Didn't work out this time? No worries – let's stay in touch. Follow our open positions on KierunekToyota, keep up to date with what's happening at our company, and connect with our Recruiters on LinkedIn. As soon as you see a role that interests you, feel free to apply again!
Requirements:
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience). Experince in DevOps, DevSecOps, Platform Engineering, or Application Security roles. Strong hands-on experience with CI/CD pipelines and modern SDLC practices. Demonstrated experience implementing security tooling such as: SAST, DAST, SCA Container and artifact scanning Secrets management Pipeline security controls Experience with cloud platforms (AWS, Azure, or GCP). Strong understanding of Agile, DevOps, and secure-by-design principles. Experience with incident and service management practices. ​ Preferred Qualifications Experience with enterprise toolchains (e.g., Jira, GitHub, GitHub Actions, ServiceNow). Familiarity with DORA metrics and developer productivity frameworks. Experience in regulated environments. Knowledge of policy-as-code tools (e.g., OPA, Sentinel). Security or cloud certifications (e.g., CISSP, CCSP, AWS Security). Experience leading platform or shared services teams Key Competencies Security-first mindset Service ownership mentality Platform thinking Risk-based decision making Automation and engineering mindset Strong cross-functional leadership Data-driven continuous improvement You have a TOYOTA DNA, this means: Courage: you are ready to let go of the easy path to reach challenging targets Creativity: your passion drives you to explore innovative ideas and challenge the impossible Coaching: you share knowledge and feedback with your colleagues and celebrate each other's success Curiosity: you are open for new experience and able to combine imagination with fact-based observation Collaboration: you are a team player, respe ctful and inclusive in your style and you take a customer-oriented approach
Must have: Degree, Cybersecurity, DevOps, Security, CD pipelines, SDLC, SAST, DAST, Cloud platform, Azure, GCP
Nice to have: Jira, GitHub, Cloud, CISSP, AWS, Go, Golang
Daily tasks: - Service Ownership & Strategy
– Own the end-to-end DevSecOps service lifecycle (design, build, run, improve).
– Define and maintain the DevSecOps service roadmap aligned with business and security priorities.
– Establish service standards, guardrails, and reference architectures.
– Ensure the platform scales to support organizational growth and cloud adoption.
– Secure SDLC Enablement
– Embed security controls into CI/CD pipelines and developer workflows.
– Drive adoption of secure coding, SAST, DAST, SCA, secrets scanning, and container security.
– Define and enforce security gates and quality thresholds.
– Partner with AppSec and Security teams on risk management and remediation workflows.
– Platform Reliability & Operations
– Ensure high availability, performance, and resilience of DevSecOps tooling and pipelines.
– Define SLAs/SLOs and monitor service health.
– Lead incident management and root cause analysis for platform issues.
– Manage upgrades, capacity planning, and technical debt.
– Governance, Risk & Compliance
– Ensure DevSecOps processes meet internal security policies and external regulatory requirements.
– Support audit readiness (e.g., SOX, ISO, SOC2 as applicable).
– Implement access controls, audit logging, and segregation of duties.
– Maintain risk register and drive remediation plans.
– Automation & Continuous Improvement
– Drive pipeline standardization and reusable automation patterns.
– Reduce manual controls through policy-as-code and infrastructure-as-code.
– Continuously optimize lead time, deployment frequency, and failure rates.
– Promote shift-left and shift-right security practices.
– Stakeholder & Service Management
– Act as the primary service owner and escalation point.
– Manage service demand, intake, and prioritization.
– Collaborate with Engineering, Security, Cloud, and Operation teams.
– Provide service reporting to leadership.
– Financial & Vendor Management
– Manage DevSecOps platform budget and forecast.
– Optimize licensing and tooling costs.