Cloud Security Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·WarszawaFull-time·B2B

#479935·Dodano wczoraj·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Microsoft Azure Cloud Amazon AWS GCP DevOpsNetwork SecurityCloud security

Podsumowanie oferty

Own the cloud security architecture and strategy for a platform that turns live sports broadcasts into personalized highlight packages. Work across Azure, AWS, and GCP, embedding security controls into infrastructure and delivery workflows using Terraform, Kubernetes, and policy-as-code.

Wymagania

4+ years of hands-on experience in Cloud Security or Security Engineering within multi-cloud environments.
Deep expertise in Azure security architecture and cloud-native controls.
Strong practical knowledge of Kubernetes security, including RBAC, network policies, admission controllers, and image scanning.
Hands-on proficiency with Terraform and Infrastructure as Code using policy-as-code principles.
Proven background integrating security controls (SAST/DAST/SCA/secret scanning) into CI/CD pipelines alongside DevOps teams.
Clear communication skills and experience partnering directly with engineering and management stakeholders.
Familiarity with security requirements for LLM and AI infrastructure.

Nice to have:

Proficiency in Python for developing custom security tooling and automation.
Working experience with SOC 2 compliance frameworks and audit readiness.
Prior experience serving as a security lead or hands-on technical lead.
Exposure to modern container security practices, including image signing, SBOMs, and runtime protection.

Obowiązki

Architect and enforce the multi-cloud security strategy across Azure, AWS, and GCP, covering IAM, network security, and secrets management.
Embed automated guardrails in Terraform and CI/CD pipelines using policy-as-code (OPA, Sentinel, Azure Policy) to block misconfigurations before deployment.
Own Kubernetes (AKS) cluster security, establishing RBAC, network policies, pod security standards, and admission controls.
Drive vulnerability and posture management through the CNAPP platform, managing findings to closure under strict SLAs.
Integrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows, partnering with engineering teams on remediation.
Lead cloud security incident response procedures, conduct post-mortems, and implement preventive measures.
Collaborate with DevOps, MLOps, and FinOps teams to embed security baselines into development workflows.
Manage customer security assessments and technical questionnaires with Sales and Legal stakeholders.

Newxel

10 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz