Cloud Security Engineer

Quick Facts

• Role: Cloud Security Engineer (hands-on security engineering)

• Focus: AWS cloud posture & workload protection, cloud security tooling/detection, and security automation in delivery pipelines

• Also: Secure AI use across the company and AI capabilities in the product

Description

You’ll be the first dedicated Cloud Security Engineer for a fully cloud-native environment, building cloud and infrastructure security as the center of the security program. The role includes owning AWS security posture, standing up and tuning security tooling and detections, and embedding automated security checks into CI/CD. You will also help secure internal and product AI by controlling data flows and mitigating risks like prompt injection and data exposure.

Responsibilities

• Secure and harden the AWS environment: IAM, network boundaries, encryption/key management; build security into Terraform modules/guardrails; secure Kubernetes/ECS workloads, container images, secrets management, and policy-as-code.

• Stand up detection tooling: select, deploy, and fine-tune CNAPP/CSPM/workload protection/logging/detection solutions; ensure telemetry coverage; support investigations.

• Automate security in delivery pipelines: integrate SAST, SCA, secrets, IaC, and container scanning; reduce noise; turn findings into tickets and evidence into gates.

• Secure AI across the company and product: review AI tools/connectors, map data flows, control prompt injection, data exposure, and over-permissioned integrations; work with R&D on threat modeling, controls, and monitoring.

• Support an AI code factory: review and help set up fully automated AI code deployment and product development.

• Be the go-to cloud security expert: guide DevOps and R&D designs so the secure path is the easy path.

Requirements

• 6+ years across cloud/infrastructure engineering and information security, with substantial hands-on cloud security experience

• Proven production AWS security experience (IAM and org-level controls, networking, encryption, logging)

• Production experience with Terraform and Kubernetes and/or ECS

• Builder mindset: implement and tune security tooling from scratch and operate with ownership/ambiguity

• Coding and automation ability (Python, TypeScript/Node, Go or similar) and comfort with APIs and CI/CD automation

• Ability to collaborate and influence through technical reasoning and working solutions

• Clear communication in English and Polish (C1)

• Based in Poland; open to occasional afternoon CET meetings with colleagues in other time zones

Benefits

• Remote work and flexible working hours

• Non-service days

• Private medical care for you and your entire family (including dental, physiotherapy, psychological support)

• Group life insurance

• MultiSport (75% covered)

• English language learning budget

• Cafeteria platform with monthly budget

• Glasses reimbursement every 3 years

• Team building events (annual offsite and Christmas parties) and workation week