Cloud Security Lead - Multi-Cloud, IAM & Incident Response

Tango; Warszawa; Hybrid; PLN 350,000 - 550,000; Full time

Benefits offered by this job

Stock options

Medical insurance for you

Hybrid work arrangement

Lunch budget

Parking

Multisport card

Team culture

Job summary

Tango is seeking a Cloud Security Lead to own cloud security end to end across a multi-cloud setup. You will define strategy, architecture, tooling, and hands-on engineering to secure cloud environments and drive security across the organization.

In this role you will design secure architectures, manage CNAPP/CSPM and container security, embed policy-as-code into CI/CD, and mentor engineers while engaging with executives. Fluency in English is required for a global team.

Qualifications

• 5+ years in security engineering
• 3+ years cloud security in production
• Deep expertise in at least one major cloud provider (Google Cloud)
• Kubernetes and container security experience
• IaC experience with Terraform or equivalent
• Cloud IAM/ID and access management depth
• Python or Go proficiency and automation mindset
• Experience in cloud security incidents
• Ability to influence engineers and present to executives
• Fluent English

Responsibilities

• Design and own secure multi-cloud architecture and baselines (CIS)
• Manage CNAPP/CSPM, runtime/container security, patching SLAs, attack surface visibility
• Embed security guardrails in release workflows (IaC scanning, secrets management)
• Architect IAM with least-privilege models and just-in-time access
• Build cloud logging pipelines into SIEM and create detections/playbooks
• Mentor engineers, report metrics to executives, scale cloud security team
• Support compliance audits

Skills

Cloud security

Kubernetes security

Terraform / IaC

Python / Go

IAM governance

Threat modeling

Incident response

Executive communication

English fluency

Tools

GCP

Wiz CNAPP

Kubernetes security tooling

CI/CD security tooling

Job description

Tango is seeking a Cloud Security Lead to own cloud security end to end across a multi-cloud setup. You will define strategy, architecture, tooling, and hands-on engineering to secure cloud environments and drive security across the organization.

In this role you will design secure architectures, manage CNAPP/CSPM and container security, embed policy-as-code into CI/CD, and mentor engineers while engaging with executives. Fluency in English is required for a global team.