Platform and Security Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Developer-Driven SecOps: Utilize your programming expertise to transform manual security and infrastructure tasks into automated, self-service APIs and internal tools, communicating effectively with our product engineers.

• Platform Operations: Architect, implement, and manage cloud infrastructure (mainly AWS) as a secure and dependable platform, facilitating self-service for engineering teams to deploy and run their applications.

• Infrastructure Hardening: Apply defense-in-depth and zero-trust strategies, enforcing layered security measures across network, compute, identity, and data tiers.

• Security Standards & Governance: Create, document, and enforce security standards, guidelines, and hardening baselines for software development (SDLC) and platform operations, promoting adoption throughout the organization.

• Incident Response: Identify, triage, manage, and respond to cybersecurity incidents, overseeing the entire process from initial detection to resolution and post-mortem analysis.

• Hands-on Security Engineering: Proactively address vulnerabilities, implement security features (WAF rules, SIEM monitors, access policies), and enhance overall platform resilience.

• Continuous Threat Review: Perform ongoing assessments of security tools (such as our CNAPP Wiz), processes, and controls in response to emerging threats, architectural changes, and internal risk evaluations.

• Harness Engineering: Extend and refine our tooling that supports the Agent-Harnesses to protect AI-assisted development workflows throughout the SDLC.

• Stakeholder Collaboration: Coordinate, communicate, and align effectively with key stakeholders, including the CTO, CISO, Engineering Managers, Tech Leads, and cross-functional product teams.

⛳️ Requirements

• Developer Empathy: You possess an understanding of the Go and TypeScript ecosystems from a developer’s viewpoint. You know how to secure software supply chains and seamlessly integrate security into CI/CD pipelines without hindering the product teams.

• Manager-of-one: You are highly independent, taking full responsibility for tasks and projects without needing close supervision.

• Good Communicator: You can articulate complex technical concepts clearly and work collaboratively with diverse teams and stakeholders.

• Eager to Learn: You have a strong desire to learn new technologies and a curiosity to explore uncharted territories.

• Excited About Tech: You enjoy solving challenging technical problems, have a genuine passion for technology, and possess a nerdy enthusiasm.

• Reliable & Quality-Aware: You meet deadlines while maintaining attention to detail and upholding high standards in your work.

• Daily (High Proficiency): Terraform/OpenTofu, Shell-scripting, and core AWS services (VPC/Networking, EC2, ELB, Route53, IAM, RDS, CloudFront, Lambda, S3, CloudTrail, CloudWatch Logs, StepFunctions).

• Weekly (Familiarity & Automation): Go, TypeScript, GitHub Actions, Docker, Kubernetes (K8s), GitOps, Datadog (Cloud-Native Observability), and Wiz (CNAPP).

• Monthly (Occasional Use): Python, Java/Kotlin, Helm, Maven, Gradle, Spring framework, RabbitMQ.

🏝️ Benefits

• Benefits package – private medical care and a sports card to support your health and well-being.

• Access to Udemy Business – enhance your skills with thousands of high-quality online courses.

• Flexible work model – work fully remotely or combine it with on-site collaboration at our modern office in Warsaw.

• Employment options tailored to you – choose the contract type that best meets your needs.

• Flexible Working Hours – adjust your schedule to fit your lifestyle.

• Unique experience in the Fitness and SaaS industry – join a market-leading company in a dynamic, fast-growing sector.

• International team – collaborate with talented colleagues from across the globe in a diverse and inclusive environment.

• Unforgettable company events – participate in engaging team-building activities and memorable celebrations.