Cloud Security Engineer

First Connect Insurance Services is a digital marketplace providing independent insurance agents access to top US carriers and the optionality necessary to grow their businesses. Agents can work with 150+ carriers, selling various insurance policies, including home, auto, small business, and more. The company is fully cloud-native, operating without offices or data centers, with all infrastructure running in the cloud.

• 6+ years of experience in cloud/infrastructure engineering and information security, with hands-on cloud security.
• Proven experience securing production AWS environments including IAM, networking, encryption, and logging.
• Solid production experience with Terraform and Kubernetes and/or ECS.
• Experience building and tuning security tooling from scratch.
• Programming skills in Python, TypeScript/Node, Go, or similar, with CI/CD automation experience.
• Strong communication skills in English and Polish (both C1), collaborating with DevOps, R&D, and non-technical stakeholders.
• Based in Poland with availability for occasional CET timezone meetings.

Nice to have:

• Application security experience covering pipeline scanning, dependency management, and familiar web and API vulnerabilities.
• Familiarity and fluency with AI tools and risks such as prompt injection, data leakage, and third-party AI data flows.

• Secure and harden the AWS cloud estate including identity and access, network boundaries, encryption, and key management.
• Build security into infrastructure deployment using Terraform modules, Kubernetes, ECS, container images, secrets management, and policy-as-code.
• Select, deploy, and tune cloud security platforms (CNAPP/CSPM, workload protection, logging, detection).
• Ensure telemetry coverage and support security investigations.
• Integrate and automate security scanning (SAST, SCA, secrets, IaC, container scanning) into CI/CD pipelines.
• Help the company adopt AI safely by reviewing tools, data flows, and integrations, and support AI capabilities in products.
• Review and assist in automated AI code deployment and product development.
• Act as the technical expert and reference for cloud security, reviewing designs and guiding secure practices.

Please be informed that the data controller is First Connect Insurance. Data processing complies with the Polish Labour Code and applicable data protection laws. Consent to data processing can be withdrawn at any time. Personal data is processed solely for recruitment purposes and related legal obligations.