Cloud Security Engineer (Travel and Transportation)

Location: Bulgaria, Lithuania, or Poland

Company

Develop cloud-native, AI-powered software for airlines and hospitality brands, helping improve commercial performance, reduce costs, and expand digital commerce capabilities alongside existing airline systems.

What you will do

• Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including runtime protection, policy development, finding triage, and security-tool integrations.
• Operate the edge security layer with Cloudflare WAF, bot management, rate limiting, DNS/TLS, DDoS protection, and origin routing.
• Automate vulnerability management and secure configuration across cloud infrastructure, containers, and code.
• Participate in production incident response for DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents.
• Secure the software supply chain through SonarCloud SAST, Dependabot, container image hardening, SBOM/SCA tooling, and release-level security reporting.
• Produce compliance evidence, train engineering teams, advise on platform integrations and AI/RAG services, and contribute to the cloud-security roadmap.

Requirements

• 5+ years of experience in cloud security or platform engineering with a security focus.
• Hands-on GCP experience with GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking.
• Production experience with CNAPP/CSPM platforms such as Wiz, Prisma Cloud, Orca, or Google Security Command Center.
• Experience administering WAF, CDN, and bot-management platforms, with strong Terraform skills.
• Experience with vulnerability management, SAST, SCA/dependency scanning, container hardening, penetration-test remediation, and SIEM integrations.
• Python or Bash scripting, production incident response, runbook development, and clear technical communication skills.

Nice to have

• AI-assisted or LLM-based security workflow automation.
• AWS and Azure experience, or familiarity with Rego and OPA.
• Identity and access-management experience with Okta SSO/SCIM, PAM, and least-privilege reviews.
• Airline or travel-industry experience and familiarity with PCI-scoped payment flows.
• Experience with PCI DSS, SOC 2, ISO 27001, or NIS2, plus relevant cloud-security certifications.

Culture & Benefits

• Flexible work options, including remote and hybrid opportunities.
• Technical and non-technical training, internal conferences, and meetups.
• Mentorship and professional development support.
• Health insurance and sports activities.
• Referral program, work anniversary program, and additional vacation days.