AI-Driven AppSec Operations Lead

Mend; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

Mend.io is seeking a hands-on Security Operations Lead to drive security across cloud infrastructure, product, compliance, and customer-facing activities. You will collaborate with Engineering, Product, IT, Sales, Legal, and leadership to identify risks, enhance controls, and strengthen Mend’s security posture.

The role requires deep expertise in security operations, cloud security technologies, vulnerability management, incident response, and regulatory frameworks such as SOC 2 and ISO

Qualifications

• Hands-on experience in security operations, cloud security, or product security.
• Experience coordinating security programs across engineering, product, and legal teams.
• Familiarity with SOC 2, ISO 27001/27701/27017 and AI governance considerations.

Responsibilities

• Assess security risks across Mend.io product and cloud infrastructure and drive a prioritized improvement plan.
• Own day-to-day cloud and infrastructure security operations, including SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management.
• Lead vulnerability management, including HackerOne bug bounty program and remediation coordination with Engineering.
• Lead security incident response and support disaster recovery planning and testing.
• Support customer-facing security activities, including questionnaires, RFPs, and technical security discussions during sales cycles.
• Drive audit and certification activities, including SOC 2 and ISO 27001/27701/27017, and maintain compliance controls and evidence through Drata.
• Manage third-party security assessments and support security and AI governance.
• Serve as a key internal security advisor for teams across the company.
• Own and improve security tooling, automation, and operational processes.

Skills

Security Operations

Cloud Security

Product Security

Vulnerability management

Incident response

SIEM

WAF

CSPM

IAM

Cross-functional collaboration

Compliance awareness

Tools

HackerOne

Drata

Job description

Mend.io is seeking a hands-on Security Operations Lead to drive security across cloud infrastructure, product, compliance, and customer-facing activities. You will collaborate with Engineering, Product, IT, Sales, Legal, and leadership to identify risks, enhance controls, and strengthen Mend’s security posture.

The role requires deep expertise in security operations, cloud security technologies, vulnerability management, incident response, and regulatory frameworks such as SOC 2 and ISO