Cloud Security Engineer (Travel and Transportation)

Coherent Solutions; Polska; Hybrid; PLN 260,000 - 340,000; Full time

Benefits offered by this job

Health insurance

Flexible work options

Technical and non-technical training

Conferences and meetups

Mentorship

Job summary

Coherent Solutions is a digital product engineering company delivering cloud and software solutions with a global team of 1700+ professionals. We seek a Cloud Security/Platform Engineer to secure a greenfield travel-technology initiative using GCP, Wiz, and Cloudflare, focusing on edge protection and threat mitigation for production systems.

You will own cloud security posture, implement runtime protections, manage vulnerability response, and enable engineering through automation and runbooks,

Qualifications

• 5+ years of experience in cloud security or platform engineering with a security focus.
• Hands‑on experience with GCP (GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking).
• Production experience with CNAPP/CSPM like Wiz (policy authoring, integrations, and runtime protection).
• Hands‑on administration of a WAF, CDN, and bot‑management stack at scale.
• Strong Terraform experience, including building modules for security tooling and WAF configuration.
• Experience with vulnerability management across cloud infra, containers, and code (SAST, SCA, container image hardening, pentest remediation).
• Experience routing cloud security signals to SIEM or security-monitoring platforms and integrating alerts with PagerDuty and Slack.
• Scripting in Python or Bash for automation and security reporting.
• Security incident-response experience and runbook development.

Responsibilities

• Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage and runtime sensor deployment.
• Operate and evolve the edge security layer via Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for production zones.
• Tune security rules using production traffic and enable teams to use edge-security tooling effectively.
• Support and automate vulnerability management and secure configuration with Wiz, SAST, and Dependabot findings, driving remediation Baselines.
• Participate in security incident response for cloud events, including DDoS, supply-chain alerts, credential exposure, and data-handling incidents.
• Own SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and SBOM/SCA tooling selections.
• Publish release-level security reports for engineering teams and map Wiz controls to frameworks for repeatable evidence collection.
• Train Platform, CloudOps, and Product Engineering on Wiz and Cloudflare administration, mapping service catalogs to owners.

Skills

GCP

Wiz

Terraform

Python

Bash

Jira

PagerDuty

Slack

Cloudflare

Cloudflare WAF

Cloud Armor

DNS

SAST

Dependabot

SonarCloud

Tools

Cloudflare WAF

Cloudflare Bot Management

Cloudflare DNS/TLS

Terraform

Jira

PagerDuty

Slack

GCP

AWS

Job description

Coherent Solutions is a digital product engineering company focused on empowering business success. Our global team of 1700+ talented professionals collaborate seamlessly to deliver innovative solutions that drive measurable business impact. Headquartered in Minneapolis, USA, the company’s core competencies across 10 locations worldwide include product software development, IT consulting, data and analytics, machine learning, mobile app development, DevOps, Salesforce, and more.

Company Background

Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape.

Project Description

You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services.

Technologies

• GCP, AWS
• Wiz
• Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting
• Terraform
• SonarCloud and Dependabot
• Jira, PagerDuty and Slack
• Python and Bash

What You'll Do

• Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack;
• Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones;
• Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively;
• Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure;
• Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks;
• Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams;
• Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable;
• Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows;
• Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture;

Job Requirements

• 5+ years of experience in cloud security or platform engineering with a security focus, including hands‑on experience with GCP (GKE, IAM, audit logging, log sinks, Cloud Armor, and VPC networking);
• Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection;
• Hands‑on administration of a WAF, CDN, and bot‑management stack at scale;
• Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure;
• Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking;
• Experience routing cloud security signals to a SIEM or security‑monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack;
• Scripting skills in Python or Bash for automation and security reporting;
• Security incident‑response experience in a production environment, including developing runbooks and managing vendor escalations;
• Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions;

Nice To Have

• Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling;
• Experience with AWS and Azure;
• Familiarity with Rego, OPA, or other policy‑as‑code languages;
• Experience with identity and access‑management tooling, including Okta SSO/SCIM, PAM solutions, and least‑privilege reviews for cloud IAM;
• Experience facilitating OWASP SAMM assessments, threat‑modelling sessions, or security‑champions programs;
• Airline or travel‑industry experience, including PCI‑scoped payment flows, partner integrations, and customer‑facing security reporting;
• Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2;
• Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty;

What Do We Offer

The global benefits package includes:

• Technical and non-technical training for professional and personal growth;
• Internal conferences and meetups to learn from industry experts;
• Support and mentorship from an experienced employee to help you professional grow and development;
• Health insurance;
• Sports activities to promote a healthy lifestyle;
• Flexible work options, including remote and hybrid opportunities;
• Referral program for bringing in new talent;
• Work anniversary program and additional vacation days.

Please, note, that we will consider all the applications with due respect, but only shortlisted candidates will be contacted.

Please take your time to see Coherent Solutions Privacy Policy for Job Applicants for details on how we process your personal data: https://www.coherentsolutions.com/privacy-policy-for-job-applicants