Cloud Security Engineer

First Connect Insurance Services is a digital marketplace providing independent insurance agents access to top US carriers and various insurance policies including home, auto, and small business. The company operates fully cloud-native, focusing on technology and cloud infrastructure security as part of its growth strategy.

• 6+ years of experience in cloud/infrastructure engineering and information security, with strong hands-on cloud security expertise.
• Experience securing production AWS environments, including IAM, networking, encryption, and logging.
• Solid production experience with Terraform and Kubernetes and/or ECS.
• Proven experience implementing and tuning security tooling from scratch.
• Coding skills in Python, TypeScript/Node, Go, or similar, with API and CI/CD automation capability.
• Effective collaboration and communication skills in English and Polish (both C1 level).
• Based in Poland and available for occasional CET meetings.

Nice to have:

• Application security experience including pipeline-based scanning, dependency and secrets hygiene, and web/API vulnerability prioritization.
• Familiarity and fluency with AI tools and associated risks (prompt injection, data leakage, over-permissioned integrations).

• Secure and harden AWS environment including identity and access, network boundaries, encryption, and key management.
• Build security into infrastructure deployment using Terraform modules, Kubernetes, ECS, container images, secrets management, and policy-as-code.
• Select, deploy, and fine-tune cloud security platforms (CNAPP/CSPM, workload protection, logging, detection).
• Ensure telemetry coverage, alerts, and support incident investigations.
• Embed and automate security in CI/CD pipelines, including SAST, SCA, secrets, IaC, and container scanning.
• Help secure internal and product AI capabilities by reviewing tools, mapping data flows, and controlling risks.
• Support automated AI code deployment and product development.
• Act as technical reference for cloud security within R&D and DevOps teams, providing guidance and reviewing designs.

Position requires candidate to be based in Poland and able to attend occasional meetings in CET timezone. Professional English and Polish proficiency at C1 level is required.