Senior Security Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• You will collaboratively manage the company’s security roadmap alongside our Security Leader, ensuring a balance of domains based on risk, while also engaging as a hands-on technical contributor.

• You will be responsible for overseeing security programs from start to finish: from shaping the roadmap and aligning stakeholders to the implementation and adoption phases.

• This position offers a tangible growth opportunity to **DevSec Team Lead** — a player-coach role that involves leading the team’s delivery and development while remaining deeply engaged in technical tasks, with career advancement along the engineering IC path.

• The role encompasses the entire security landscape, prioritizing based on risk rather than specialization:

• Application & product security — including threat modeling, secure SDLC, design/code review, and supply chain security.

• Infrastructure & cloud security — focusing on AWS posture, runtime security, and IAM; requiring close collaboration with the Infrastructure team.

• Security automation & AI — developing and managing automation and AI tools that support the company’s security objectives; ensuring security in our AI-assisted development practices and LLM tools.

• Endpoint & corporate security — addressing developer endpoint security (MDM, privilege management, software governance) and maintaining secrets hygiene.

• Whole-posture assessment — conducting framework-based assessments (CIS Controls), identifying areas of high value for attention, and transforming findings into prioritized, engineering-friendly plans.

• Compliance interface — linking technical efforts to SOC 2 / PCI-DSS / ISO 42001 requirements.

• Mentor engineers, lead blameless post-mortems for security incidents, and align with senior management through presentations.

⛳️ Requirements

• Proven hands-on experience in at least two security domains (e.g., AppSec + cloud/infra) and familiarity with the others — you consider overall posture and risk rather than just tools.

• You have successfully built or scaled a security program from the ground up (including process, tools, and adoption), preferably in a low-structure setting.

• Proficiency in coding and automation (Python preferred) along with substantial knowledge of cloud security (AWS).

• Experience with AI-assisted development and securing such environments: familiarity with LLM tooling (e.g., MCP) and awareness of AI governance.

• Demonstrated leadership qualities — mentoring, stepping in for a lead, or holding formal leadership roles — along with the ambition to manage a team’s delivery while remaining technical.

• A collaborative educator and multiplier, not a gatekeeper: you thrive in high-empathy interactions with developers.

• Must be located in Europe.

🏝️ Benefits

• Support for professional development (training, courses, conferences, books, etc.).

• A transparent career development framework.

• Various options for your working preferences (office, remote, flexible).

• Access to the latest tools and equipment necessary for your role.

• Team events including annual employee awards, internal hackathons, and a variety of fun activities ranging from cooking to the Glia Olympic games!

• Generous referral bonuses.