Cloud Security Engineer – Azure & GCP, Hybrid Ready

Allegro Ltd.; Województwo wielkopolskie; Híbrido; PLN 180 000 - 240 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model (4/1)

Annual bonus

Flexible working hours

30 days occasional remote work

Well-located offices • kitchens • bike

Resumo da oferta

Allegro Ltd. in Poland hosts a Large-Scale Hybrid Security Engineering role focused on securing Azure, GCP, and on-prem environments. You will drive vulnerability management, cloud security posture, and automation for rapid response, with collaboration across enterprise teams.

The team emphasizes end-to-end ownership, measurable improvements, and the adoption of AI tools to accelerate security operations. Enjoy flexible hours, hybrid work, and a generous bonus program in a vibrant tech ecosystem.

Qualificações

• Demonstrate high independence and a self-driven approach – you can take end-to-end ownership of security improvements, from assessment and design through implementation, measurement, and operational handover.
• Hands-on experience securing cloud environments, preferably Azure and/or GCP, including Kubernetes and container workloads, cloud posture management, configuration hardening, and remediation of security findings.
• Understand vulnerability management and patching processes, including asset inventory, risk prioritization, exception handling, and collaboration with asset owners.
• Know security standards and control frameworks such as CIS Benchmarks and NIST CSF, and can translate them into practical technical baselines.
• Have practical knowledge of IAM and identity security, including privileged access, MFA, and Entra Conditional Access; experience managing security configuration as code (Terraform) is a plus.
• Familiar with network-security concepts and technologies such as firewalls, network segmentation, secure web gateways, SASE, DNS, TLS, and proxy routing.
• Experience with security automation, workflow orchestration, enrichment, ticketing integrations, or response playbooks.
• Understand external attack-surface and exposure management, including discovery and monitoring of domains, public IPs, cloud assets, and misconfigurations.
• Can create clear technical documentation, runbooks, and remediation guidance, and collaborate effectively with engineering, network, IAM, and service-owner teams.
• Want to be proud of the impact they make; value high-quality security reviews and engage in substantive discussions on software engineering and security best practices.
• Open to developing soft skills and embracing a growth mindset through retrospectives and cross-team collaborations.
• Are excited about adopting and securing AI technologies, to maximize efficiency.
• Look for effective, business-enabling solutions to security requirements set by our ecosystem.
• Maintain knowledge in a rapidly shifting threat landscape.
• Know English at least B2 level.

Responsabilidades

• Take end-to-end ownership of security improvements, from identifying risks and designing controls through implementation, measurement, and operational handover.
• Build and maintain security controls across Azure, GCP, and on-premises environments, focusing on cloud posture, identity, hardening, and configuration security.
• Improve vulnerability-management and patching processes by increasing asset coverage, defining remediation priorities, managing exceptions, and collaborating with system and service owners.
• Implement and maintain security baselines based on CIS Benchmarks and NIST principles, including measurable compliance checks and clear remediation paths.
• Strengthen identity and access controls, including privileged access, MFA, Entra Conditional Access, and policy-as-code practices.
• Help deliver and operate network and endpoint-security capabilities, including SASE, secure web gateways, firewall rules, network segmentation, and related telemetry.
• Develop external attack-surface monitoring for domains, public IPs, certificates, cloud assets, and exposed services; ensure findings are assigned, prioritized, and tracked to remediation.
• Maintain clear technical documentation, service runbooks, alerting, and on-call procedures so that security services are reliable and supportable.
• Partner with engineering, network, IAM, and service-owner teams to deliver pragmatic, business-enabling security solutions.

Conhecimentos

Cloud security

Azure

GCP

Kubernetes

Terraform

Vulnerability management

Security automation

Identity and access management

Network security

English (B2+)

Ferramentas

SASE

NIST/ CIS Benchmarks

Descrição da oferta de emprego

Allegro Ltd. in Poland hosts a Large-Scale Hybrid Security Engineering role focused on securing Azure, GCP, and on-prem environments. You will drive vulnerability management, cloud security posture, and automation for rapid response, with collaboration across enterprise teams.

The team emphasizes end-to-end ownership, measurable improvements, and the adoption of AI tools to accelerate security operations. Enjoy flexible hours, hybrid work, and a generous bonus program in a vibrant tech ecosystem.