Allegro

BlueSec Cybersecurity Engineer

Brak informacji o wynagrodzeniu

NieokreśloneHybryda·PoznańFull-time

#467705·Dodano 7 dni temu·2

Źródło: Allegro Sp. z o.o.

Aplikuj teraz

Tech Stack / Keywords

Azure GCP Kubernetes TerraformCIS BenchmarksNIST CSFIAMMFAEntra Conditional AccessSASE

Podsumowanie oferty

Secure and improve controls across Azure, GCP, and on-premises environments supporting a large-scale marketplace. The role focuses on cloud and identity security, vulnerability management, and network and endpoint protection.

Wymagania

Take end-to-end ownership of security improvements, from assessment and design through implementation, measurement, and operational handover.
Have hands-on experience securing cloud environments, preferably Azure and/or GCP, including Kubernetes and container workloads, cloud security posture management, configuration hardening, and remediation of security findings.
Understand vulnerability management and patching processes, including asset inventory, risk prioritization, exception handling, and collaboration with asset owners.
Know security standards and control frameworks such as CIS Benchmarks and NIST CSF, and be able to translate them into practical technical baselines.
Have practical knowledge of IAM and identity security, including privileged access, MFA, and Entra Conditional Access.
Be familiar with network-security concepts and technologies such as firewalls, network segmentation, secure web gateways, SASE, DNS, TLS, and proxy routing.
Have experience with security automation, such as workflow orchestration, enrichment, ticketing integrations, or response playbooks.
Understand external attack-surface and exposure management, including discovery and monitoring of domains, public IPs, cloud assets, and misconfigurations.
Be able to create technical documentation, runbooks, and remediation guidance, and collaborate with engineering, network, IAM, and service-owner teams.
Be open to developing soft skills and participating in team retrospectives and cross-team collaborations.
Be ready to adopt and secure AI technologies and incorporate AI coding and security assistants into daily work.
Be able to look for effective, business-enabling solutions to security requirements and continually develop knowledge of the threat landscape.
Know English at least B2 level.

Nice to have:

Experience managing security configuration as code, for example with Terraform.

Obowiązki

Take end-to-end ownership of security improvements, from identifying risks and designing controls through implementation, measurement, and operational handover.
Build and maintain security controls across Azure, GCP, and on-premises environments, focusing on cloud posture, identity, hardening, and configuration security.
Improve vulnerability-management and patching processes by increasing asset coverage, defining remediation priorities, managing exceptions, and collaborating with system and service owners.
Implement and maintain security baselines based on CIS Benchmarks and NIST principles, including measurable compliance checks and clear remediation paths.
Strengthen identity and access controls, including privileged access, MFA, Entra Conditional Access, and policy-as-code practices.
Help deliver and operate network and endpoint-security capabilities, including SASE, secure web gateways, firewall rules, network segmentation, and related telemetry.
Develop external attack-surface monitoring for domains, public IPs, certificates, cloud assets, and exposed services; ensure findings are assigned, prioritized, and tracked to remediation.
Maintain technical documentation, service runbooks, alerting, and on-call procedures so that security services are reliable and supportable.
Partner with engineering, network, IAM, and service-owner teams to deliver pragmatic, business-enabling security solutions.

Benefity

Annual bonus based on individual annual performance and company results.
A MacBook Pro or Dell computer with Windows, with necessary accessories.
A cafeteria plan with a selection of fringe benefits, including medical, sports, or lunch packages, insurance, and purchase vouchers.
Employer-paid English classes related to the nature of the job.
A training budget, an internal learning platform with multiple trainings, and hackathons.
An additional day off for volunteering.
Social events for employees.
Bicycle parking.

Elastyczne godziny

Premie

Parking dla rowerów

Opieka zdrowotna

Karta sportowa

Ubezpieczenie

Kursy językowe

Dofinansowanie szkoleń

Szkolenia wewnętrzne

Spotkania integracyjne

Płatny urlop

Allegro

123 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz