Senior Security Engineer

Location: Czechia; remote role

Base salary range: 858,667–1,073,333 CZK per year

Company

hirify.global builds an AI-powered agentic personalization platform for search, shopping, marketing, and customer journey optimization, serving more than 1,400 global brands.

What you will do

• Design, implement, and monitor security controls across AWS production environments using IAM, GuardDuty, Security Hub, KMS, VPC security groups, Config, and related services.
• Secure Linux servers, Docker and Kubernetes workloads, including host hardening, image security, runtime security, and cluster configuration.
• Own corporate infrastructure security, including JumpCloud identity and access tooling and Twingate zero-trust network access.
• Administer and integrate Splunk by onboarding log sources, maintaining data pipelines, and supporting platform health and licensing with the SOC team.
• Drive vulnerability and CVE lifecycle management, patching, root cause analysis, remediation metrics, and reduced MTTR across cloud, corporate, and on-premises systems.
• Build security automation, policy-as-code, IaC scanning, CI/CD guardrails, logging requirements, and security architecture standards while supporting incident response and mentoring junior engineers.

Requirements

• 6+ years of hands-on cybersecurity engineering experience focused on cloud security, infrastructure security, and system hardening.
• Deep AWS security experience, including secure architecture, IAM, GuardDuty, Security Hub, KMS, Config, and Inspector.
• Strong Linux administration and hardening experience with Docker and Kubernetes security.
• Experience with corporate infrastructure, identity and access platforms, zero-trust tooling, and Splunk or comparable SIEM/data platforms.
• Experience owning vulnerability and CVE management, patching, remediation reporting, scripting with Python, Go, or Bash, and implementing IaC security controls in CI/CD pipelines.
• Knowledge of CIS and NIST frameworks, strong cross-functional communication skills, and experience mentoring engineers; relevant security certifications are preferred.

Nice to have

• AWS Certified Security – Specialty, Certified Kubernetes Security Specialist, CISSP, CCSP, or CCSK certification.

Culture & Benefits

• Virtual-first work with flexible working hours and freedom accompanied by responsibility.
• Paid volunteering time, personal development workshops, and an annual $1,500 professional education budget.
• Employee assistance support, Calm subscription, quarterly additional DisConnect days, sports, yoga, and meditation opportunities.
• Extended parental leave of up to 26 calendar weeks for primary caregivers.
• Potential restricted stock units or stock options, company performance bonus, and employee referral bonus.