2 дня назад
Senior Security Engineer (Cloud & AppSec)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security Engineer (Cloud & AppSec): Securing AWS and GCP infrastructure and web, mobile, and network applications with an accent on cloud security, application security testing, and CI/CD integration. Focus on threat modeling, incident response, security monitoring, and resolving complex infrastructure and product risks.
Location: Poland; remote workplace
Company
develops digital workplace and document workflow products, including SignNow, pdfFiller, DocHub, and other platforms serving hundreds of millions of users and more than one million customers worldwide.
What you will do
- Secure AWS and GCP environments through IAM, least-privilege access, workload identities, network segmentation, encryption, and secrets management.
- Identify and remediate cloud misconfigurations, security risks, and suspicious activity using security logging and monitoring.
- Test web, mobile, and network applications and operate SAST, DAST, and SCA tooling integrated with CI/CD pipelines.
- Support secure product development through architecture reviews, threat modeling, risk assessments, and clear communication of findings.
- Investigate, triage, contain, and document application, infrastructure, and user-related security incidents.
- Prepare for SOC 2 and CASA audits and external assessments, and configure and monitor the CDN.
Requirements
- 4+ years of professional experience in information security, application security, or a related field.
- Hands-on experience securing AWS and/or GCP environments.
- Practical experience selecting, configuring, and integrating SAST, DAST, and SCA tools into CI/CD.
- Experience with application security testing, incident response, secure SDLC practices, and threat modeling.
- Working knowledge of Bash, Python, Go, or Terraform, plus clear risk-communication skills.
- English at B2 level or higher, written and spoken.
Nice to have
- Experience with SOC 2, CASA, PCI DSS, or NIST CSF compliance audits.
- Previous experience as a DevOps engineer or developer.
Culture & Benefits
- Flexible remote and hybrid working, with offices in the United States, Poland, Romania, and Ukraine.
- Competitive compensation based on local market conditions, performance-based bonuses, and stock options.
- Courses, conferences, learning resources, career growth, and internal mobility opportunities.
- Country-specific health and wellness benefits, fitness options, and quarterly company-wide Mental Health Days.
- Family-friendly policies, family days, a junior club for children, and a pet-friendly approach.
- Charitable support through the Care programme and transparent company-wide communication.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
7 дней назад
Senior Application Security Engineer (AI)
7 дней назад
Application Security Engineer (DevSecOps)
5 дней назад
Senior Engineer, Application Security
5 дней назад
Staff Cloud Security Engineer (AI)
151 000 - 178 500$
5 дней назад
Senior Application Security Engineer (Cybersecurity)
Nebius
8 дней назад