Cloud Security Engineer

LT Harper Group; Polska; Remote; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Private medical insurance

Healthcare cashback scheme

4x salary life assurance

Unlimited annual holiday

Enhanced family leave

Work abroad for up to 6 weeks a year

Learning and development budget

Job summary

LT Harper Group in Poland is seeking a Senior Security Engineer (Cloud and SecOps) to own threat detection, response and prevention across our AWS-hosted SaaS platform used by major banks. You’ll lead SIEM, the managed SOC relationship and run-time security, stepping in during incidents.

Join a small Information Security team across London and Poland, implementing detections, IAM guardrails, and automation with IaC.

Qualifications

• Experience in security operations or cloud security engineering
• Hands-on SIEM design, tuning detections and incident response
• AWS security expertise: IAM, SCPs, CloudTrail, GuardDuty, KMS, VPC
• Container and Kubernetes runtime security, ideally on Amazon EKS
• Experience with managed SOC/MDR providers
• Python scripting and infrastructure-as-code knowledge

Responsibilities

• Own the SIEM: onboard log sources, tune detections, ensure MITRE ATT&CK coverage
• Manage the internal run of the managed SOC, runbooks, reviews and SLAs
• Lead end-to-end incident response from triage to root cause
• Own AWS run-time security: IAM, guardrails, logging, corporate estate security
• Run vulnerability management, attack surface, pen testing
• Automate security processes with scripting and IaC

Skills

Security operations

Cloud security

SIEM

Python scripting

Infrastructure as code

Incident response

Kubernetes security

Tools

IAM

Organizations and SCPs

CloudTrail

GuardDuty

Security Hub

KMS

VPC design

MDR/SOC tooling

Job description

Senior Security Engineer (Cloud and SecOps) | Poland, Remote

You’ll own threat detection, response and prevention across an AWS-hosted SaaS platform used by some of the world’s largest banks. That means the SIEM, the managed SOC relationship and the run-time security of the AWS estate, with you leading the response when incidents happen.

• Location: Poland, remote (occasional travel)
• Level: Senior, reporting to the Head of Information Security

You’ll join a small Information Security team across London and Poland at an enterprise SaaS company, working alongside GRC and a Senior Product Security Engineer.

Senior Security Engineer - What you’ll actually do:

• Own the SIEM: onboard log sources, build and tune detections, and track coverage against MITRE ATT&CK
• Act as internal owner of the managed SOC, including runbooks, service reviews, triage quality and SLAs
• Lead incident response end to end, from triage and containment to root cause analysis
• Own AWS run-time security, including IAM, organisational guardrails and logging coverage, and secure the corporate estate (Google Workspace, endpoints, SaaS apps)
• Run infrastructure vulnerability management, external attack surface management and penetration testing
• Automate security processes with scripting and infrastructure-as-code

Senior Security Engineer - What you’ll need:

• Security operations or cloud security engineering experience, including leading incident response in cloud environments
• Hands‑on SIEM work, designing and tuning detections as well as responding to alerts
• In‑depth AWS security knowledge: IAM, Organizations and SCPs, CloudTrail, GuardDuty, Security Hub, KMS and VPC design
• Container and Kubernetes runtime security, ideally on Amazon EKS
• Experience working with or managing a managed SOC or MDR provider
• Python or similar scripting, plus working knowledge of infrastructure-as-code

Nice to have:

• Detection-as-code, SOAR or automated response playbooks
• CSPM or CNAPP tooling
• Familiarity with DORA, ISO 27001 and SOC 2
• AWS Certified Security Specialty, GCIH, GCIA or GCFA

What’s in it for you

• Private medical insurance, healthcare cashback scheme and 4x salary life assurance
• Unlimited annual holiday and enhanced family leave
• Work abroad for up to 6 weeks a year
• Learning and development budget