Senior Cloud Security Engineer

The key task will be to assess the current security posture of products and services, primarily modern SaaS solutions operating in Azure, and subsequently on-premise environments. The person in this position will also be responsible for creating a coherent security strategy, roadmaps, and minimum security standards applicable to project teams.

The role combines hands-on security engineering with elements of architecture, consulting, and stakeholder collaboration.

A long-term project, carried out fully remotely.

Daily tasks

• Assessing the current security level of applications, SaaS services, and cloud and on-premise environments.
• Creating and developing security strategies and security roadmaps.
• Defining minimum security standards for product and developer teams.
• Identifying areas requiring penetration tests.
• Organizing and coordinating penetration tests.
• Analyzing pentest results and coordinating remediation actions.
• Implementing the Security by Design approach.
• Developing Vulnerability Management processes.
• Organizing and developing code scanning, vulnerability scanning, and cloud infrastructure scanning.
• Implementing security scanning in CI/CD pipelines.
• Integrating security controls with DevSecOps processes.
• Conducting threat modeling and risk assessments.
• Assessing the security of Azure architecture and recommending improvements.
• Providing support regarding AWS security and on-premise infrastructure.
• Collaborating with developer, DevOps, Cloud, and business teams.
• Conducting security workshops.
• Prioritizing security initiatives and supporting teams in their implementation.
• Preparing comprehensive security posture assessments for individual products and services.

Requirements

• Very good knowledge of security in the Microsoft Azure environment.
• Experience in designing cloud security architecture.
• Experience in creating security strategies, security roadmaps, or security standards.
• Practical experience in the areas of:
• Vulnerability Management,
• Security Assessments,
• Security Scanning,
• Penetration Testing,
• Threat Modeling,
• Risk Assessment.
• Experience in organizing or coordinating penetration tests and managing the remediation process.
• Knowledge of Security by Design and secure software development practices.
• Experience with CI/CD security and DevSecOps.
• Knowledge of at least one of the following solutions:
• Azure DevOps,
• GitHub Actions,
• GitLab CI/CD.
• Knowledge of Infrastructure as Code, preferably Terraform.
• Good knowledge of Windows environments and enterprise infrastructure.
• Knowledge of cloud-native and enterprise application security.
• Ability to independently assess the security posture of a product or system.
• Very good communication skills and experience collaborating with technical and business stakeholders.
• English enabling fluent work in an international environment.

An additional asset will be

• Experience with AWS Security.
• Knowledge of Kubernetes and container security.
• Experience in the .NET environment.
• Knowledge of standards and frameworks:
• ISO 27001,
• NIST,
• CIS Controls,
• OWASP,
• SOC 2.
• Certifications such as:
• CISSP,
• CCSP,
• AZ-500,
• SC-100,
• AWS Certified Security – Specialty.

Must have: Azure