BlueSec Cybersecurity Engineer (AI)

Location: Poznań or Warszawa, Poland; hybrid 4/1 model with 30 days of occasional remote work

Company

hirify.global operates one of the region's largest marketplaces and a large-scale technology environment with over 1,000 microservices, high-throughput data infrastructure, and production machine learning.

What you will do

• Own security improvements end to end, from risk identification and control design through implementation, measurement, and operational handover.
• Build and maintain security controls across Azure, GCP, Kubernetes, containers, and on-premises environments.
• Improve vulnerability management, patching coverage, asset ownership, remediation prioritization, and exception handling.
• Implement CIS Benchmark and NIST-based security baselines, compliance checks, identity controls, and policy-as-code practices.
• Strengthen network, endpoint, and external attack-surface security, including SASE, secure web gateways, firewalls, segmentation, domains, public IPs, certificates, and exposed services.
• Develop automation, documentation, runbooks, alerting, and on-call procedures while collaborating with engineering, network, IAM, and service-owner teams.

Requirements

• High independence and the ability to take end-to-end ownership of security improvements.
• Hands-on experience securing cloud environments, preferably Azure and/or GCP, including Kubernetes, containers, cloud security posture management, configuration hardening, and remediation.
• Knowledge of vulnerability management and patching, including asset inventory, risk prioritization, exception handling, and work with asset owners.
• Knowledge of CIS Benchmarks, NIST CSF, and practical technical security baselines.
• Practical IAM and identity-security knowledge, including privileged access, MFA, and Entra Conditional Access.
• Familiarity with firewalls, network segmentation, secure web gateways, SASE, DNS, TLS, and proxy routing.
• Experience with security automation, workflow orchestration, enrichment, ticketing integrations, or response playbooks.
• Understanding of external attack-surface and exposure management, including domains, public IPs, cloud assets, and misconfigurations.
• Ability to create technical documentation, runbooks, and remediation guidance and collaborate across technical teams. English at least B2 level is required.
• Interest in adopting and securing AI technologies, including AI coding and security assistants.

Nice to have

• Experience managing security configuration as code, for example with Terraform.

Culture & Benefits

• Flexible working hours starting between 7:00 a.m. and 9:00 a.m., with a hybrid 4/1 model and 30 days of occasional remote work.
• Annual performance- and company-results-based bonus.
• MacBook Pro or equivalent Dell equipment, ergonomic offices, and necessary accessories.
• Cafeteria benefits including medical, sports, lunch, insurance, and purchase packages.
• Paid job-related English classes, training budget, internal learning platform, hackathons, team tourism, and an additional volunteering day.
• Autonomous, collaborative teams with knowledge sharing, modern AI tools, and opportunities for continuous development.