Cloud Security Engineer
New
S
SyneriseCloud security
Poland (Remote)Full-TimeSenior
Salary20,000 - 30,000 PLN per month
Apply NowOpens the employer's application page
Job Details
- Languages
- Fluency in Polish (C2) and English (C1).
- Experience
- At least 3 years of experience in IT security, with a focus on cloud-native environments.
- Required Skills
- PythonBashGCPMicrosoft AzureGrafanaCI/CD
Requirements
- At least 3 years of experience in IT security, focused on cloud-native environments.
- In-depth knowledge of Kubernetes security, including RBAC, network policies, and pod security standards.
- Hands-on experience managing microservices architectures.
- Experience implementing DevSecOps solutions and securing CI/CD pipelines, such as GitLab CI/CD or ArgoCD.
- Experience with code security and vulnerability-scanning tools and automating application risk-management processes.
- Strong expertise in Azure and Google Cloud Platform security features and tools, such as Azure Security Center and Google Cloud Security Command Center.
- Understanding of security threats and attack techniques relevant to containerized and cloud-native environments.
- Proficiency in scripting languages such as Python or Bash for security-process automation.
- Familiarity with monitoring and logging tools such as Elastic Stack, Prometheus, and Grafana.
- Knowledge of security frameworks and best practices such as OWASP SAMM and NIST CSF, and compliance regulations such as GDPR.
- Preferred certifications include CKS, CISSP, Azure or GCP Security Specialty, CEH, or similar.
- Fluency in Polish (C2) and English (C1).
Responsibilities
- Monitor and secure cloud environments, primarily on Azure and Google Cloud Platform, using built-in security tools and custom controls for self-hosted IaaS components.
- Implement and manage security measures for Kubernetes and Docker platforms supporting microservices architectures.
- Design, implement, and maintain DevSecOps solutions in CI/CD pipelines, including code security analysis, vulnerability management, software composition analysis, and application and infrastructure security testing.
- Collaborate with DevOps and development teams to embed security-by-design principles throughout the product development lifecycle.
- Conduct security audits, penetration tests, and vulnerability scans for applications and infrastructure.
- Analyze security incidents, investigate root causes, and implement remediation strategies.
- Develop, implement, and maintain security policies and standards based on frameworks and best practices such as ISO 27001, NIST CSF, and CIS Benchmarks.
- Provide teams with education and training on application and infrastructure security.
View Full Description & ApplyYou'll be redirected to the employer's site
