Cloud-Native Security Engineer — DevSecOps

LotusFlare; Kraków; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Yearly bonus

Paid lunches

MultiSport card

Private medical insurance

Reimbursement of accountant assistance

Job summary

LotusFlare is a cloud-native SaaS provider seeking a Security Engineer to drive IT security across the DNO Cloud stack. You will implement security policies, work with infrastructure and product teams, and report to the VP of Infrastructure.

You’ll perform offensive security testing, monitor environments, review changes, and stay ahead of threats in a fast-growing cloud platform used by global customers.

Qualifications

• 3+ years of DevOps or DevSecOps experience.
• Experience securing CI/CD pipelines with modern DevSecOps tooling (SAST, DAST, SCA, IaC scanning).
• Bachelor's degree.
• Cloud-native infra stack with Terraform, Ansible, etc.

Responsibilities

• Actively managing the security of our cloud-native runtime environment.
• Communicate and negotiate security topics with technical and non-technical audiences.
• Drive security improvements to production cloud environments.
• Perform targeted offensive security testing.
• Implement continuous monitoring to identify security issues at code, app and infra layers.
• Review code and production changes to maintain security standards.
• Stay current on emerging threats and controls for cloud.
• Collaborate with backend teams on architecting high-performance microservices.

Skills

DevSecOps

CI/CD security

Cloud security AWS

Terraform

Ansible

SAST

DAST

SCA

IaC scanning

Linux security

Network security

SSO access control

Python/Go scripting

English (B1+)

Education

Bachelor's degree

Tools

Terraform

Ansible

Qualys

Job description

LotusFlare is a cloud-native SaaS provider seeking a Security Engineer to drive IT security across the DNO Cloud stack. You will implement security policies, work with infrastructure and product teams, and report to the VP of Infrastructure.

You’ll perform offensive security testing, monitor environments, review changes, and stay ahead of threats in a fast-growing cloud platform used by global customers.