Senior Security Engineer – Cloud, AppSec

This is a fully remote position, open to applicants in Poland.

📋 Description

• Ensure the security of airSlate's AWS and GCP environments by managing IAM, implementing least privilege principles, configuring workload identities, establishing network segmentation, and overseeing encryption and key and secrets management.

• Identify and rectify cloud misconfigurations and security vulnerabilities.

• Establish security logging and monitoring systems and investigate any suspicious activities.

• Conduct security testing for web, mobile, and network-based applications.

• Operate and enhance SAST, DAST, and SCA security scanning tools, integrating them into CI/CD pipelines.

• Engage in architecture reviews, threat modeling discussions, and risk assessments.

• Articulate security findings and collaborate with engineers until resolutions are achieved.

• Investigate, triage, contain, and document security incidents, including conducting post-mortem analyses.

• Prepare for SOC 2 and CASA audits, as well as external assessments, in conjunction with product and compliance teams.

• Configure and oversee the CDN.

• Work alongside the five-member Security Engineering team.

⛳️ Requirements

• Over 4 years of professional experience in information security, application security, or a related discipline.

• Hands-on experience in securing AWS and/or GCP environments.

• Practical experience using SAST, DAST, and SCA tools, including selection, setup, and integration into CI/CD processes.

• Experience in security testing for web, mobile, or network applications.

• Background in incident response, covering investigation through to post-mortem analysis.

• Strong understanding of secure development practices throughout the SDLC, including threat modeling.

• Proficient in Bash, Python, Go, or Terraform.

• Excellent communication skills, with the ability to convey risks in a manner that prompts actionable responses from teams.

• Proficiency in English at B2 level or higher, both written and spoken.

• Experience in preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF.

• Previous experience as a DevOps engineer or developer.

🏝️ Benefits

• Flexible working environment with options for remote and hybrid work.

• Opportunity to work from offices in the United States, Poland, Romania, or Ukraine, or remotely from various countries.

• Performance-based bonus system.

• Stock options available.

• Access to courses, conferences, and other learning resources.

• Career advancement and internal mobility opportunities.

• Comprehensive health coverage tailored to specific countries.

• Wellness programs and access to fitness options.

• Quarterly company-wide Mental Health Days.

• Flexibility for parents.

• airSlate Junior Club for children.

• Company-wide family days.

• Pet-friendly workplace culture.

• Charitable initiatives through the airSlate Care program.

• Matching employee donations.

• Open lines of communication and company-wide Q&A sessions with the CEO.