Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Poland, +5 more countries.

📋 Description

• Design, implement, and oversee security policies utilizing a Policy as Code methodology; create Terraform scripts and deploy modifications through peer-reviewed CI/CD pipelines.

• Integrate and uphold automated security scanning tools within CI/CD pipelines to identify misconfigurations prior to merging.

• Monitor, manage, and address findings using CSPM/CNAPP tools; facilitate the remediation of cloud risks, threats, misconfigurations, and compliance violations alongside engineering teams.

• Identify and execute cloud controls to enhance security posture, ensuring that these controls are enforced throughout the entire cloud ecosystem.

• Develop and implement automation that detects non-compliance and self-corrects in real time.

• Proactively assess and respond to security threats and anomalies from detection and alerting tools; assist with incident response, penetration test outcomes, and audit remediation.

• Collaborate with Engineering, Platform, Compliance, and Product teams to integrate security best practices into the SDLC and CI/CD pipelines.

• Ensure products comply with or surpass industry regulations and internal standards; manage security processes, policies, and documentation.

• Assist with audits and assessments, providing compliance evidence and driving remediation efforts.

• Evaluate network security controls and access permissions, removing excessive access and maintaining a least privilege approach.

⛳️ Requirements

• A minimum of 5 years of experience in cloud security, infrastructure security, or a hands-on DevSecOps technical role.

• Extensive practical experience in writing and managing Terraform, with a robust background in deploying and managing infrastructure via CI/CD pipelines.

• Profound expertise in AWS security services (e.g., Security Hub, GuardDuty, IAM, CloudTrail, Config).

• Proficiency in at least one scripting language (Python, Bash, Go) for automation tasks.

• Comprehensive understanding of cloud security principles, Kubernetes, network security, access control, and incident response protocols.

• Strong problem-solving skills and excellent communication abilities.

• Ability to lead initiatives and work effectively with diverse teams and external stakeholders.

• A Bachelor’s or Master’s degree in Computer Science or Information Security is a plus.

• Security certifications (e.g., CISSP, CCSP, CCSK, GIAC) are advantageous.

• DevOps certifications (e.g., Terraform Certified Associate) are a plus.

• Cloud certifications (e.g., AWS Solutions Architect, AWS Certified Security) are an advantage.

• Familiarity with AI and contact center industries is a plus.

🏝️ Benefits

• Fixed compensation.

• Long-term employment with vacation days.

• Opportunities for professional development (courses, training, etc.).

• Be part of successful, cutting-edge technology products that are creating a global impact in the service industry.

• Work with proficient and enjoyable colleagues.

• Access to Apple gear.