Cloud Security Architect (AI)

Quick Facts

• Focus: Cloud security architecture and controls with AI-assisted security automation

Description

Design and implement secure architectures and security controls across cloud, hybrid and on-premises environments, primarily for cloud security. Gather business, technical and compliance requirements, run security architecture reviews and threat modeling, and build reference architectures, standards, and secure design patterns. Improve CSPM capabilities and use AI-assisted tools/workflows to enhance configuration and vulnerability analysis, risk assessment, remediation recommendations, and security reporting.

Responsibilities

• Design and implement cloud-focused security architectures and controls
• Translate business, technical, and compliance requirements into secure cloud solutions for new implementations, migrations, and security improvements
• Define and improve security capabilities across IAM, network security, data protection, workload security, logging/monitoring, governance, and CSPM
• Conduct security architecture reviews, threat modeling, and risk assessments for cloud infrastructure, applications, and integrations
• Develop cloud security reference architectures, security standards, configuration baselines, and secure design patterns
• Evaluate cloud security technologies (CSPM, CNAPP, cloud-native security services, security automation)
• Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec, and compliance teams to integrate security into cloud solutions
• Build and support security automation using Terraform, PowerShell, Python, REST APIs, or similar technologies
• Use AI-assisted tools and workflows for security analysis, risk assessment, scripting, reporting, documentation, and automation of repetitive tasks
• Identify AI-assisted security automation opportunities with validation, data protection, and human oversight; communicate risks, decisions, and remediation plans

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience in security architecture and design
• Experience delivering or significantly contributing to cloud security architecture, implementation, or modernization projects
• Hands-on expertise with Azure, AWS, or GCP and its native security services
• Strong knowledge of cloud security architecture (IAM, network segmentation, encryption, key management, workload protection, logging, monitoring)
• Practical experience with CSPM, cloud security assessments, configuration reviews, and risk remediation
• Experience with tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, or Prisma Cloud
• Working knowledge of IAM, network security, application security, data protection, and security operations; familiarity with Zero Trust, NIST, ISO 27001, and CIS Benchmarks
• Familiarity with Infrastructure as Code and scripting for cloud security automation
• Intermediate practical experience with AI-assisted security tooling (security analysis/troubleshooting/research, structured prompting, AI-generated scripts/queries/documentation validation, simplifying repetitive workflows, configuring AI-assisted workflows/integrations)
• Understand safe AI usage (data protection, access control, validation of AI outputs) and willingness to grow AI automation skills
• Strong communication and collaboration skills
• Hands-on technical proficiency

Benefits

• Hybrid work by design with opportunity to work remotely within Poland
• Chance to work abroad up to 60 days annually; business-driven relocation opportunities
• Career development programs; mentoring, soft skills, and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay; Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Social events and well-being events; office amenities (snacks, coffee, entertainment/relaxation zones)