Cloud Security Architect (AI)

Quick Facts

• Role focused on cloud security architecture and AI-assisted security automation

Description

Design and implement security architectures and controls across cloud, hybrid, and on-premises environments, with primary focus on cloud security. Gather business, technical, and compliance requirements to build secure cloud solutions for new implementations, migrations, and security improvements, including IAM, network security, data protection, workload security, logging/monitoring, governance, and CSPM. Use AI-assisted tools and workflows to enhance security activities—configuration and vulnerability analysis, risk assessment, remediation recommendations, security policy and compliance analysis, and automation of repetitive tasks—while ensuring validation, data protection, and human oversight.

Responsibilities

• Design and implement cloud-focused security architectures and controls (cloud, hybrid, on-prem)
• Collect business, technical, and compliance requirements for secure cloud implementations, migrations, and security improvements
• Define and improve cloud security capabilities: IAM, network security, data protection, workload protection, logging, monitoring, and governance
• Build and enhance CSPM capabilities: misconfiguration detection, compliance monitoring, risk prioritization, remediation
• Conduct security architecture reviews, threat modeling, and risk assessments for cloud infrastructure, applications, and integrations
• Develop cloud security reference architectures, security standards, configuration baselines, and secure design patterns
• Evaluate cloud security technologies including CSPM, CNAPP, cloud-native security services, and security automation solutions
• Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec, and compliance teams to integrate security into cloud solutions
• Support security automation using Terraform, PowerShell, Python, REST APIs, or similar technologies
• Use AI-assisted tools and workflows for security analysis, troubleshooting, scripting, reporting, documentation, and repetitive automation
• Identify opportunities for AI-assisted security automation with validation, data protection, and human oversight; communicate risks, architectural decisions, and remediation plans to stakeholders

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience focused on security architecture and design
• Experience delivering or significantly contributing to cloud security architecture, implementation, or modernization projects
• Strong hands-on expertise with one major cloud platform (Azure, AWS, or GCP) and its native security services/controls
• Strong understanding of cloud security architecture (IAM, network segmentation, encryption, key management, workload protection, logging, monitoring)
• Practical experience with CSPM, cloud security assessments, configuration reviews, and risk remediation
• Experience with cloud security tools (e.g., Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud)
• Working knowledge across IAM, network security, application security, data protection, and security operations; familiarity with Zero Trust, NIST, ISO 27001, and/or CIS Benchmarks
• Familiarity with Infrastructure as Code and scripting for cloud security automation
• Intermediate practical experience with AI-assisted tooling/automation for security analysis and research, structured prompting, AI-generated script/query/document generation with validation, and AI-supported repetitive workflow automation
• Understanding of safe AI usage: data protection, access control, and validation of AI outputs; willingness to further develop AI automation skills
• Strong communication and collaboration skills
• Hands-on technical proficiency

Benefits

• Hybrid-by-design with opportunity for remote work within Poland
• Chance to work abroad for up to 60 days annually and business-driven relocation opportunities
• Career development programs and thought leadership/mentoring plus soft-skill and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay; Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Office amenities and corporate/social/well-being events
• Benefits apply to employees; B2B/Contractor terms agreed individually