Staff Security Engineer

As a Staff Security Engineer, you will play a key technical role in improving the security of systems, infrastructure, and software development practices.

You will work across engineering teams, including Software Engineering, Platform, Infrastructure, DevOps, Cloud, and the Security Operations Center. Your goal will be to identify systemic security risks, design practical solutions, and help engineering teams build secure systems by default.

This is a senior individual contributor role with broad technical influence, reporting directly to the VP of Engineering. You will not be limited to operating security tools or responding to individual vulnerabilities. You will look at security across the organization, identify areas for improvement, define technical security standards and architecture, and work directly with engineering teams to implement them.

You will also act as a bridge between Security Operations and Engineering. Insights from incidents, vulnerabilities, threat intelligence, and security assessments should result in concrete improvements to architecture, tooling, development practices, and technical controls.

We are looking for someone who is comfortable going deep technically while also being able to influence engineering decisions across multiple teams.

You Will

• Identify systemic security risks across applications, on-prem infrastructure, cloud environments, internal platforms, and software development processes.
• Perform security architecture reviews for existing and new systems.
• Work directly with engineering teams to identify security weaknesses early in the software development lifecycle and design practical ways to address them.
• Partner with the SOC to improve detection capabilities, analyze attack patterns and incidents, and translate findings into better detection rules, security controls, and long-term architectural improvements.
• Design and help implement security controls, tools, automation, and services that can be reused across engineering teams.
• Define and evolve technical security standards, engineering guidelines, reference architectures, and security best practices.
• Review complex technical designs and provide actionable security recommendations without unnecessarily blocking engineering teams.

Desired Experience

• 8+ years of professional experience in security engineering, software engineering, infrastructure security, product security, or closely related technical roles.
• Strong hands-on experience in security engineering and designing security controls for production environments.
• Experience with large-scale distributed systems and high-throughput environments.
• Polish and English language proficiency is required (minimum B2/C1).
• Experience performing security architecture reviews, threat modeling, technical security assessments, or similar security design activities.
• Strong understanding of application security, infrastructure security, network security, authentication, authorization, and common attack techniques.
• Experience securing cloud and on-premise environments.
• Good understanding of Linux, containers, Kubernetes, networking, and modern distributed systems.
• Programming or scripting experience in at least one general-purpose language such as Python, Go, Java, C++, or similar.

Selected Technologies

• Google Cloud Platform and on-premise solutions
• Kubernetes, GCP serverless services
• Argo CD and Argo Workflows
• PostgreSQL, Google Cloud SQL
• GitHub, Gerrit
• Terraform, Terragrunt
• GitHub Actions, Jenkins

We Offer

• Competitive compensation with an attractive salary package and significant growth opportunities.
• Work with cutting-edge technologies on large-scale, dynamic projects.
• Extremely flexible working conditions: work when convenient, devote as much time as you can, and work fully remotely.
• Purpose-driven work, with growing knowledge and competencies applied directly to practical business results.