Senior Security Engineer (Cloud & AppSec)
New
A
airSlateSaaS cybersecurity
Listing location: Poland; Workplace type: RemoteFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- English at B2 level or higher, written and spoken
- Experience
- 4+ years of professional experience in information security, application security, or a related field
- Required Skills
- AWSBashCI/CD
Requirements
- Have 4+ years of professional experience in information security, application security, or a related field.
- Bring hands-on experience securing AWS and/or GCP.
- Have practical experience choosing, setting up, and integrating SAST, DAST, and SCA tools into CI/CD.
- Have experience with security testing of web, mobile, or network applications.
- Have experience in incident response, from investigation through post-mortem.
- Have good knowledge of secure development practices across the SDLC, including threat modeling.
- Have working knowledge of Bash, Python, Go, or Terraform.
- Communicate security risks clearly so teams act on them.
- Have English proficiency at B2 level or higher, written and spoken.
- Experience preparing for SOC 2, CASA, PCI DSS, or NIST CSF audits is helpful.
- Previous experience as a DevOps engineer or developer is helpful.
Responsibilities
- Secure AWS and GCP environments, including access management, network segmentation, encryption, and key and secrets management.
- Find and fix cloud misconfigurations and security risks.
- Set up security logging and monitoring, and investigate suspicious activity.
- Test the security of web, mobile, and network-based applications.
- Run and improve SAST, DAST, and SCA scanning tools and connect them to CI/CD pipelines.
- Join architecture reviews, threat modeling sessions, and risk assessments to help teams build secure products.
- Explain security findings and work with engineers to resolve issues.
- Investigate, triage, and contain security incidents, and write post-mortems.
- Prepare for SOC 2 and CASA audits and external assessments with product and compliance teams.
- Configure and monitor the CDN.
View Full Description & ApplyYou'll be redirected to the employer's site