Cloud security engineer for AI infrastructure

DOU Polska; Warszawa; On-site; PLN 350,000 - 520,000; Full time

Job summary

DOU Polska ищет единого инженера по кибербезопасности для полного владения архитектурой облачной безопасности и стратегией во всей компании. Ваша задача — внедрить политики как код и proactive baselines, встроив их в автоматизированные пайплайны, работая с DevOps, MLOps и инженерами, сохраняя высокую скорость доставки.

Вы будете поддерживать единое направление в области безопасности облака across Azure, AWS и GCP, внедрять guardrails, контролировать CI/CD, управлять инцидентами и

Qualifications

• 4+ года в области облачной кибербезопасности или инженерии безопасности в условиях multi-cloud.
• Azure security architecture and cloud-native controls
• Kubernetes security: RBAC, network policies, admission controls, image scanning
• Terraform и IaC с подходами policy-as-code
• SAST/DAST/SCA/secret scanning в CI/CD
• Сильные коммуникативные навыки с взаимодействием с инженерами и менеджментом
• Знакомство с требованиями безопасности для AI/LLM инфраструктуры
• Плюс: Python для инструментов, SOC2 и аудит readiness

Responsibilities

• Архитектура и обеспечение единой мультиоблачной стратегии безопасности Azure, AWS и GCP.
• Внедрение guardrails как кодa в Terraform и CI/CD для блокировки некорректной конфигурации.
• Обеспечение безопасности AKS: RBAC, сетевые политики, pod security и контролируемые admission переходы.
• Управление уязвимостями и posture через CNAPP, обработка findings в SLA.
• Интеграция SAST/DAST/SCA и сканирования секретов в CI/CD с командами разработки.
• Руководство процедурами реагирования на инциденты облачной безопасности, проведение пост-мортемов и профилактических мер.
• Сотрудничество с DevOps, MLOps и FinOps для внедрения базовых требований безопасности без снижения скорости разработки.
• Управление оценками безопасности клиентов и техническими анкетами совместно с отделами продаж и юридическим департаментом.

Skills

Cloud security

Multi-cloud environments

Kubernetes security

Terraform

Policy-as-code

CI/CD security

Python tooling (bonus)

AI/LLM security

Tools

Terraform

OPA

Sentinel

Azure Policy

Job description

Описание

As the sole security engineer across the entire company, you will take full ownership of the end-to-end cloud security architecture and strategy. The core challenge is not gatekeeping, but designing policy-as-code guardrails and proactive security baselines that embed natively into automated pipelines. You will work directly with DevOps, MLOps, and engineering teams to maintain high software delivery velocity while securing scalable cloud and AI infrastructure.

Задачи

• Architect and enforce the unified multi-cloud security strategy across Azure, AWS, and GCP covering IAM, network security, and secrets management
• Embed automated guardrails in Terraform and CI/CD pipelines using policy-as-code (OPA, Sentinel, Azure Policy) to block misconfigurations before deployment
• Own Kubernetes (AKS) cluster security, establishing RBAC, network policies, pod security standards, and admission control controls
• Drive end-to-end vulnerability and posture management through the CNAPP platform, managing findings to closure under strict SLAs
• Integrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows, partnering with engineering teams on remediation
• Lead cloud security incident response procedures, conducting post-mortems and implementing preventive preventive measures
• Collaborate with DevOps, MLOps, and FinOps teams to embed security baselines directly into development workflows without impacting delivery velocity
• Manage customer security assessments and technical questionnaires in coordination with Sales and Legal stakeholders

Требования

• 4+ years of hands-on experience in Cloud Security or Security Engineering within multi-cloud environments
• Deep expertise in Azure security architecture and cloud-native controls
• Strong practical knowledge of Kubernetes security, including RBAC, network policies, admission controllers, and image scanning
• Hands-on proficiency with Terraform and Infrastructure as Code using policy-as-code principles
• Proven background integrating security controls (SAST/DAST/SCA/secret scanning) into CI/CD pipelines alongside DevOps teams
• Clear communication skills with experience partnering directly with engineering and management stakeholders
• Familiarity with security requirements for LLM and AI infrastructure
• Будет плюсом: Proficiency in Python for developing custom security tooling and automation; Working experience with SOC2 compliance frameworks and audit readiness; Prior experience serving as a security lead or hands-on technical lead; Exposure to modern container security practices including image signing, SBOMs, and runtime protection

Условия

You have complete autonomy and ownership as the single security authority shaping the security roadmap for a fast-growing AI platform You are building practical, developer-friendly guardrails rather than acting as a traditional gatekeeper, directly embedding security into high-velocity engineering workflows The role provides broad multi-cloud exposure across modern Kubernetes, policy-as-code, and emerging LLM/AI infrastructure domains