FOURTHWALL

Senior Platform Security Engineer / DevOps

25k - 34k PLN25 000 - 34 000 PLN/ mies./ mies.B2BB2B (netto)

SeniorZdalnie·PoznańFull-time·B2B

#451596·Dodano miesiąc temu·6

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

GCP Kubernetes TerraformCloud securityLinux GitLab CI/CD PostgreSQLIAMGitOPSIncident Response

Podsumowanie oferty

This role involves co-owning a production platform based on GCP, GKE, Terraform, GitLab CI/CD, and PostgreSQL, with a primary focus on platform security within a small company. The engineer will manage platform security configurations, policies, alerting, and run a vulnerability disclosure programme. Responsibilities include enhancing security automation and providing security guidance to engineering teams without acting as a CISO or SOC.

Wymagania

Owned and managed a production cloud platform at a senior level, including handling failures and recovery.
Hands-on security engineering experience including platform hardening, vulnerability management, security incident handling, or operating a VDP or bug bounty.
Experience with Terraform and GitOps in production; familiarity with Flux.
Deep knowledge of Kubernetes security features such as RBAC, network policy, workload identity, and admission control.
Understanding of cloud IAM, OAuth, OIDC, service-to-service identity (mTLS or workload identity), and short-lived credentials.
Application security knowledge sufficient to evaluate and triage VDP reports, with familiarity of OWASP Top 10.
Experience with security checks in CI/CD pipelines, including secret, dependency, image, or IaC scanning.
Proficient use of AI tools like Codex or Claude in daily work and accountable for their outputs.
Ability to write automation in a general-purpose language or shell and review code.
Proficient English communication skills, both written and spoken.

Obowiązki

Co-own the platform: GCP and GKE, networking, IAM, secrets, GitOps, CI/CD, observability, and PostgreSQL.
Manage the platform-security backlog including privilege reduction, credential management, workload identity, and infrastructure vulnerability tracking.
Develop guardrails: platform configuration and policies to prevent leaks and misconfiguration, alerting, and automated scanning (secrets, dependencies, images, Terraform, code) including AI-based security review.
Run the Vulnerability Disclosure Programme (VDP): intake, validation, severity assessment, routing, communication, tracking fixes, and disclosure.
Lead recovery efforts: recovery objectives, restore, failover, access exercises, runbooks, alert quality, and postmortems.
Implement AI and automation in operations, improving on-call alerting and automation of responses.
Provide fast security advice on risky designs and changes and transform recurrent questions into guardrails or defaults.

Benefity

B2B contract with salary between 25,000 and 34,000 PLN net per month.
Remote work within Poland with flexible working hours and agreed overlap with the team.
MacBook provided.
Private healthcare, sports card, and English lessons.
Equity in the US-based company.

Elastyczne godziny

Opieka zdrowotna

Karta sportowa

Kursy językowe

Udziały pracownicze

Inne informacje

The controller of your personal data is Fourthwall, Inc. The data is processed for recruitment purposes based on the Labour Code and GDPR provisions. Providing mandatory data is obligatory; additional data provision is voluntary. Data retention lasts the recruitment process plus limitation periods or up to 24 months if consent for future recruitment is given. Candidates have rights regarding their personal data and may withdraw consent at any time without affecting prior processing.

FOURTHWALL

4 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz