Senior Security Engineer (Cloud & AppSec)

New
A
airSlateSaaS cybersecurity
Listing location: Poland; Workplace type: RemoteFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page

Job Details

Languages
English at B2 level or higher, written and spoken
Experience
4+ years of professional experience in information security, application security, or a related field
Required Skills
AWSBashCI/CD

Requirements

  • Have 4+ years of professional experience in information security, application security, or a related field.
  • Bring hands-on experience securing AWS and/or GCP.
  • Have practical experience choosing, setting up, and integrating SAST, DAST, and SCA tools into CI/CD.
  • Have experience with security testing of web, mobile, or network applications.
  • Have experience in incident response, from investigation through post-mortem.
  • Have good knowledge of secure development practices across the SDLC, including threat modeling.
  • Have working knowledge of Bash, Python, Go, or Terraform.
  • Communicate security risks clearly so teams act on them.
  • Have English proficiency at B2 level or higher, written and spoken.
  • Experience preparing for SOC 2, CASA, PCI DSS, or NIST CSF audits is helpful.
  • Previous experience as a DevOps engineer or developer is helpful.

Responsibilities

  • Secure AWS and GCP environments, including access management, network segmentation, encryption, and key and secrets management.
  • Find and fix cloud misconfigurations and security risks.
  • Set up security logging and monitoring, and investigate suspicious activity.
  • Test the security of web, mobile, and network-based applications.
  • Run and improve SAST, DAST, and SCA scanning tools and connect them to CI/CD pipelines.
  • Join architecture reviews, threat modeling sessions, and risk assessments to help teams build secure products.
  • Explain security findings and work with engineers to resolve issues.
  • Investigate, triage, and contain security incidents, and write post-mortems.
  • Prepare for SOC 2 and CASA audits and external assessments with product and compliance teams.
  • Configure and monitor the CDN.
View Full Description & ApplyYou'll be redirected to the employer's site
View details
Apply Now