Cloud Security Engineer (CNAPP)

Antal is a leader in recruitment of specialists and managers as well as consulting in the HR area. Operating in 35 countries and present in Poland since 1996, Antal has built many careers through a flexible and comprehensive approach to recruitment. The company has over 130 professional recruitment consultants with sector and position expertise.

• Experience in a technical role related to cloud security
• Practical knowledge of architecture and operations in AWS, Azure, or GCP environments
• Experience with CSPM/CNAPP tools such as Wiz
• Familiarity with CI/CD and infrastructure automation tools including Terraform, Ansible, Jenkins
• Scripting skills in Python, Bash, PowerShell
• Experience with version control systems, particularly Git
• Knowledge of security standards and regulations such as NIST, PCI-DSS, GDPR, FedRAMP
• Understanding of threats related to containers, distributed systems, and web applications

Nice to have:

• Cloud security certifications (e.g., AWS Security Specialty, Azure/GCP certificates)
• Knowledge of Cloud Security Alliance Cloud Controls Matrix (CSA CCM)

• Conduct architectural security design reviews for applications and workloads migrating to the cloud
• Design and implement detective and responsive security controls in Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Alibaba Cloud environments
• Automate cloud configuration audits to detect misconfigurations and drift
• Integrate security tools using APIs and recommend configuration changes to improve effectiveness
• Evaluate and implement solutions provided by cloud security vendors
• Collaborate with Cloud Operations teams on monitoring and responding to security incidents
• Create dashboards and reports supporting regulatory requirements and internal governance
• Define catalogs of best practices and architectural patterns for cloud security
• Verify fulfillment of security requirements before production environment deployment
• Analyze exemption requests in cloud security policies
• Continuously improve Cloud Security Engineering processes and tools