Cloud Security Engineer

Role overview A cloud-native digital marketplace is hiring its first dedicated Cloud Security Engineer to build the cloud security program from scratch rather than inherit it. The role spans AWS posture, infrastructure-as-code guardrails, security tooling, delivery-pipeline automation, and AI security, partnering closely with DevOps and R&D teams.

Responsibilities - Own the security posture of the AWS environment, including identity and access, network boundaries, encryption, and key management - Build security into infrastructure definitions through Terraform modules, Kubernetes and ECS hardening, container image controls, secrets management, and policy-as-code - Select, deploy, and fine-tune cloud security platforms (CNAPP/CSPM, workload protection, logging and detection), and ensure telemetry coverage and alerting - Embed SAST, SCA, secrets, IaC, and container scanning into CI/CD pipelines and partner with developers on remediation - Help the company adopt AI safely by reviewing tools and connectors, mapping data flows, and working with R&D on AI product features - Act as the technical reference point for cloud security across R&D and DevOps, reviewing designs and giving clear guidance

Requirements - 6+ years across cloud/infrastructure engineering and information security, with substantial hands-on cloud security experience - Production AWS experience covering IAM, organization-level controls, networking, encryption, and logging - Strong production experience with Terraform and Kubernetes and/or ECS - Track record of implementing security tooling from scratch, including selection, rollout, and tuning - Real coding fluency in Python, TypeScript/Node, Go, or similar, comfortable building things that run in CI/CD - Professional English and Polish at C1 - Based in Poland, open to occasional afternoon CET meetings

Nice to have - Application security experience such as pipeline-based scanning, dependency and secrets hygiene, and common web/API vulnerability classes - Daily use of modern AI tools and an understanding of related risks like prompt injection, data leakage, and excessive agency

Benefits and work setup - Fully remote with flexible working hours - Salary of 31,000-37,000 PLN net + VAT - Private medical care covering dental, physiotherapy, and psychological support for the whole family - Group life insurance, MultiSport with 75% coverage, and a cafeteria platform with monthly budget - English learning budget and glasses reimbursement every three years - Team building events including annual offsite, Christmas party, and a workation week