Security Engineer (Cloud Security)

Location: European Union; remote-first working environment across Europe

Company

hirify.global operates an automation platform for cloud-native and AI infrastructure, using autonomous decision-making in Kubernetes and cloud environments at production scale.

What you will do

• Learn the architecture, infrastructure, and engineering workflows; identify security flaws and material risks across a multi-tenant platform.
• Set up, operate, and tune cloud security tooling such as Wiz, converting high-signal findings into actionable fixes.
• Build threat models covering trust boundaries, service authentication, customer-cluster access, secrets, and attack paths.
• Assess and prioritize risks using evidence, business impact, and exploitability; present key risks to engineering and leadership.
• Drive security controls for production access, identity, secrets management, secure CI/CD, cloud infrastructure, Kubernetes, software supply chains, and AI-enabled systems.
• Support compliance evidence, security signals, incident-response practices, and risk validation through scripting, prototypes, or code.

Requirements

• At least 5–6 years of professional security experience; around 10 years or more is ideal.
• Hands-on experience operating cloud security tooling in production, such as Wiz, Upwind, or a similar platform, and turning findings into fixes.
• Strong understanding of cloud infrastructure security across compute, networking, IAM, storage, and service communication.
• Practical experience with at least one of AWS, GCP, or Azure, including the ability to reason about cloud-system behavior and failure modes.
• Strong understanding of Kubernetes and cloud-native infrastructure.
• Experience threat modelling real systems with STRIDE or a similar method and leading engineering teams through the process.
• Strong software-engineering fundamentals, including software architecture, distributed systems, and infrastructure reasoning.
• Ability to write or review code and automation in Go or Python.
• Strong written and spoken English required.
• Proactive, adaptable approach and comfort working in a fast-moving environment where the security function is being built from the ground up.

Nice to have

• Deep hands-on AWS, GCP, or Azure experience, including compute, networking, and storage internals.
• Kubernetes security experience with RBAC, admission control, network policies, Pod Security Standards, and production cluster hardening.
• Identity and secrets-management experience, including least-privilege IAM, workload identity, and secrets rotation.
• Detection engineering or incident-response experience, including tuning signals and reducing false positives.
• Experience with SOC 2, ISO 27001, FedRAMP, or similar frameworks.
• Software supply-chain security experience with SBOMs, dependency scanning, container-image scanning, signing, and CI/CD security.
• Experience securing AI and agent-based systems, including prompt injection, excessive agency, and tool abuse risks.
• Familiarity with AI coding agents, agentic development workflows, Terraform, infrastructure-as-code security, or certifications such as OSCP and CISSP.

Culture & Benefits

• Opportunity to build the first dedicated security function at a fast-growing cloud infrastructure company.
• Direct influence over security design, prioritization, and implementation, with close collaboration across engineering and platform teams.
• Exposure to large-scale multi-cloud, Kubernetes, and AI infrastructure.
• Flexible remote-first work across Europe.
• Equity options, learning and development budget, equipment budget, team-building support, additional time off, and company events.

Hiring process

• Introductory conversation with Mantas Norvaiša.
• Security-focused threat-modelling exercise analyzing a provided system, including trust boundaries, threats, attack paths, and mitigations.
• Conversation with Danielius about compliance and cross-functional working, followed by a culture check interview.