Cloud Security Architect (AI)

Quick Facts

• Role focused on designing secure cloud, hybrid, and on-premises architectures using cloud security controls and AI-assisted automation.
• Primary focus on evolving CSPM and broader cloud security capabilities and integrating security across engineering and compliance.

Description

Design and implement cloud security architectures and controls across cloud, hybrid, and on-premises environments, with a primary focus on cloud security. Gather business, technical, and compliance requirements, lead security architecture reviews, and improve capabilities such as IAM, network security, data protection, workload protection, logging/monitoring, governance, and Cloud Security Posture Management (CSPM). Use AI-assisted tools and workflows to improve security activities like configuration and vulnerability analysis, risk assessment, remediation recommendations, and security automation—ensuring validation and human oversight.

Responsibilities

• Design and implement security architectures and controls across cloud, hybrid, and on-premises environments.
• Gather requirements to design secure cloud solutions for new implementations, migrations, and security improvements.
• Define and improve cloud security capabilities (IAM, network security, data protection, workload security, logging, monitoring, governance) and CSPM (misconfiguration detection, compliance monitoring, risk prioritization, remediation).
• Conduct security architecture reviews, threat modeling, and risk assessments for cloud infrastructure, applications, and integrations.
• Develop cloud security reference architectures, security standards, configuration baselines, and secure design patterns.
• Evaluate cloud security technologies including CSPM, CNAPP, cloud-native security services, and security automation solutions.
• Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec, and compliance teams.
• Support security automation using Terraform, PowerShell, Python, REST APIs, or similar technologies.
• Apply AI-assisted tools/workflows for configuration/vulnerability analysis, risk assessment, policy/compliance analysis, security scripting, reporting/documentation, and workflow automation.
• Identify opportunities for AI-assisted security automation with appropriate validation, data protection, and human oversight; communicate risks, decisions, and remediation plans.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 5+ years of information security experience focused on security architecture and design.
• Experience delivering or significantly contributing to cloud security architecture, implementation, or modernization projects.
• Hands-on expertise with at least one major cloud platform (Azure, AWS, or GCP) and its native security services and controls.
• Strong understanding of cloud security architecture: IAM, network segmentation, encryption, key management, workload protection, logging, and monitoring.
• Practical experience with CSPM, cloud security assessments, configuration reviews, and risk remediation.
• Experience with tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud, or similar.
• Working knowledge across IAM, network security, application security, data protection, and security operations; understanding of security architecture principles/frameworks (Zero Trust, NIST, ISO 27001, CIS Benchmarks).
• Familiarity with Infrastructure as Code, scripting, and cloud security automation.
• Intermediate practical experience with AI-assisted tools/automation (security analysis/troubleshooting/research, structured prompting, generating/validating scripts/queries/docs, simplifying repetitive workflows, and configuring AI-assisted workflows or integrations).
• Understanding of safe AI usage: data protection, access control, and validation of AI-generated outputs; willingness to further develop AI automation skills.
• Strong communication and collaboration skills.
• Hands-on technical proficiency.

Benefits

• Hybrid by design mode with opportunity to work remotely within Poland.
• Chance to work abroad for up to 60 days annually and business-driven relocation opportunities.
• Career development programs; mentoring and soft skills/well-being programs.
• Certification support (Anthropic, Gemini, GCP, Azure, AWS); English classes.
• Stable pay; Employee Stock Purchase Plan with a 15% discount.
• Benefits package (health insurance, multisport, shopping vouchers).
• Referral bonuses up to $2,000.
• Office amenities and events; corporate, social, and well-being events.
• Open to working with contractors (B2B terms agreed individually); benefits apply to employees only.