Cloud Security Engineer: Multi-Cloud Guardrails & Automation

DOU Polska; Województwo mazowieckie; On-site; PLN 180,000 - 300,000; Full time

Job summary

DOU Polska is seeking a sole security engineer to own end-to-end cloud security architecture across Azure, AWS, and GCP. You will design policy-as-code guardrails and embed security baselines into automated pipelines, working with DevOps, MLOps, and engineering teams to maintain fast delivery while keeping security strong.

You will lead vulnerability programs, automate SAST/DAST/SCA, and drive incident response with clear SLAs, shaping the security roadmap for a fast-growing AI platform in

Qualifications

• 4+ years hands-on Cloud Security or Security Engineering in multi-cloud environments.
• Deep Azure security architecture expertise.
• Strong Kubernetes security knowledge: RBAC, network policies, admission controllers, image scanning.
• Hands-on Terraform and IaC with policy-as-code.
• Experience integrating SAST/DAST/SCA/secret scanning into CI/CD pipelines.
• Clear communication with engineering and management stakeholders.
• Familiarity with security requirements for LLM/AI infrastructure.

Responsibilities

• Architect and enforce multi-cloud security strategy across Azure, AWS, and GCP (IAM, networks, secrets).
• Embed guardrails in Terraform and CI/CD via policy-as-code (OPA, Sentinel, Azure Policy).
• Own AKS security: RBAC, network policies, pod security, admission controls.
• Manage vulnerabilities and posture via CNAPP with SLA-driven remediation.
• Integrate SAST/DAST/SCA/secret scanning into CI/CD with engineering teams.
• Lead cloud security incident response and post-mortems.
• Collaborate with DevOps, MLOps, FinOps to bake security baselines into workflows.
• Handle customer security assessments with Sales/Legal.

Skills

Cloud security engineering

Kubernetes security

Terraform / IaC

Policy-as-code (OPA/Sentinel/Azure)

CI/CD security integration

Stakeholder communication

AI/LLM infra security

Security incident response

Tools

Azure Security architecture

Kubernetes security (AKS)

CNAPP platform

SAST/DAST/SCA/secret scanning tools

Terraform

Azure Policy

Job description

DOU Polska is seeking a sole security engineer to own end-to-end cloud security architecture across Azure, AWS, and GCP. You will design policy-as-code guardrails and embed security baselines into automated pipelines, working with DevOps, MLOps, and engineering teams to maintain fast delivery while keeping security strong.

You will lead vulnerability programs, automate SAST/DAST/SCA, and drive incident response with clear SLAs, shaping the security roadmap for a fast-growing AI platform in