Назад
Company hidden
2 дня назад

Senior Security Engineer (Cloud & AppSec)

Формат работы
remote (только Poland)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer (Cloud & AppSec): Securing AWS and GCP infrastructure and web, mobile, and network applications with an accent on cloud security, application security testing, and CI/CD integration. Focus on threat modeling, incident response, security monitoring, and resolving complex infrastructure and product risks.

Location: Poland; remote workplace

Company

hirify.global develops digital workplace and document workflow products, including SignNow, pdfFiller, DocHub, and other platforms serving hundreds of millions of users and more than one million customers worldwide.

What you will do

  • Secure AWS and GCP environments through IAM, least-privilege access, workload identities, network segmentation, encryption, and secrets management.
  • Identify and remediate cloud misconfigurations, security risks, and suspicious activity using security logging and monitoring.
  • Test web, mobile, and network applications and operate SAST, DAST, and SCA tooling integrated with CI/CD pipelines.
  • Support secure product development through architecture reviews, threat modeling, risk assessments, and clear communication of findings.
  • Investigate, triage, contain, and document application, infrastructure, and user-related security incidents.
  • Prepare for SOC 2 and CASA audits and external assessments, and configure and monitor the CDN.

Requirements

  • 4+ years of professional experience in information security, application security, or a related field.
  • Hands-on experience securing AWS and/or GCP environments.
  • Practical experience selecting, configuring, and integrating SAST, DAST, and SCA tools into CI/CD.
  • Experience with application security testing, incident response, secure SDLC practices, and threat modeling.
  • Working knowledge of Bash, Python, Go, or Terraform, plus clear risk-communication skills.
  • English at B2 level or higher, written and spoken.

Nice to have

  • Experience with SOC 2, CASA, PCI DSS, or NIST CSF compliance audits.
  • Previous experience as a DevOps engineer or developer.

Culture & Benefits

  • Flexible remote and hybrid working, with offices in the United States, Poland, Romania, and Ukraine.
  • Competitive compensation based on local market conditions, performance-based bonuses, and stock options.
  • Courses, conferences, learning resources, career growth, and internal mobility opportunities.
  • Country-specific health and wellness benefits, fitness options, and quarterly company-wide Mental Health Days.
  • Family-friendly policies, family days, a junior club for children, and a pet-friendly approach.
  • Charitable support through the hirify.global Care programme and transparent company-wide communication.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →