Cloud Security - Python Coding

Zohorecruit; Polska; Hybrid; PLN 160,000 - 230,000; Full time

Job summary

Zohorecruit is seeking an experienced Cloud Security Engineer to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains.

Responsibilities include documenting findings, performing IAM assessments, building automation with Python and Terraform, and contributing to AI security governance.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or related field.
• 5+ years of experience in Cloud Security / Security Operations.
• Hands-on with AWS, Azure, GCP, or OCI security services.
• Strong knowledge of IAM, network security, and cloud-native security controls.
• Experience with CSPM tools and EDR platforms like CrowdStrike.
• Familiarity with SIEM tools and incident response processes.
• Hands-on with identity-aware access solutions such as Teleport.
• Proficiency in Python scripting.
• Foundational understanding of securing AI/ML workloads in cloud environments.

Responsibilities

• Analyze and document cloud, email, endpoint, and security monitoring findings.
• Triage, investigate, and classify security alerts across cloud and security platforms.
• Maintain findings documentation within ticketing systems, reports, or other designated platforms.
• Secure AI/ML workloads deployed in cloud environments.
• Collaborate with engineering teams to ensure secure deployment of AI services following cloud security best practices.
• Contribute to governance and policy development for secure AI usage in the cloud.
• Conduct secure configuration reviews across cloud environments.
• Perform IAM assessments and analyse CSPM findings.
• Document posture assessment results and provide recommendations for security posture improvements.
• Support continuous monitoring and tuning of cloud security controls.
• Design, develop, and maintain security automation scripts and workflow enhancements.
• Create automation artifacts using Python.
• Build cloud security infrastructure using Terraform.
• Prepare periodic cloud security reports, including alerts, remediation progress, posture improvements.

Skills

Cloud security operations

IAM & cloud security controls

Scripting (Python)

Security monitoring & incidentresponse

Terraform / IaC

CSPM tools

Education

Bachelor's degree in computer science, cybersecurity, or related field

Tools

Terraform

CrowdStrike

SIEM

Teleport

Job description

Summary

We are looking for an experienced Cloud Security Engineer to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains.

Key Responsibilities

• Security Findings & Remediation Documentation
  • Analyze and document cloud, email, endpoint, and security monitoring findings.
  • Produce clear and actionable documentation covering:
    • Risk assessment and severity classification
    • Impact analysis
    • Recommended remediation actions
  • Maintain findings documentation within ticketing systems, reports, or other designated platforms.
  • Triage, investigate, and classify security alerts across cloud and security platforms.
  • Maintain complete and accurate investigation records, including:
    • Analysis performed
    • Containment or mitigation actions (if applicable)
• AI Security in Cloud Environments
  • Secure AI/ML workloads deployed in cloud environments, including training pipelines, data storage, and inference endpoints.
  • Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or unauthorized access.
  • Collaborate with engineering teams to ensure secure deployment of AI services following cloud security best practices.
  • Contribute to governance and policy development for responsible and secure AI usage in the cloud.
• Configuration & Security Posture Assessment
  • Conduct secure configuration reviews across cloud environments.
  • Perform IAM assessments and analyse CSPM findings.
  • Document posture assessment results and provide recommendations for security posture improvements.
  • Support continuous monitoring and tuning of cloud security controls.
• Security Automation & Tooling
  • Design, develop, and maintain security automation scripts and workflow enhancements.
  • Create automation artifacts using scripting languages such as Python.
  • Provide sufficient documentation and usage notes to enable ongoing operation and maintenance by internal teams.
  • Build cloud security infrastructure using infrastructure as code tools such as Terraform.
• Operational Metrics & Reporting
  • Prepare periodic cloud security operational reports, including:
    • Alert volumes and trends
    • Remediation progress
    • Posture improvements
    • Tool tuning and optimisation efforts
  • Present concise status updates to stakeholders as requested.
  • Support investigation and response to security incidents impacting cloud environments.
  • Contribute to incident reports, investigation summaries, timelines, and technical analysis.
  • Assist with root‑cause analysis and corrective action recommendations.

Required

Skills & Qualifications

• Bachelor's degree in computer science, Cybersecurity, or related field 5+years of experience in Cloud Security / Security Operations.
• Hands‑on experience with AWS, Azure, GCP, or OCI security services
• Strong knowledge of IAM, network security, and cloud‑native security controls.
• Experience with CSPM tools and EDR platforms like Crowdstrike
• Familiarity with SIEM tools and incident response processes.
• Hands‑on experience with identity‑aware access solutions such as Teleport (or similar platforms) for secure access to infrastructure and services.
• Proficiency in scripting languages like Python.
• Foundational understanding of securing AI/ML workloads in cloud environments (e.g., model access control, API security, data protection).

Preferred Qualifications

• Certifications such as AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP
• Experience with automation, SOAR platforms, or DevSecOps practices.
• Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).
• Understanding of email security protocols (SPF, DKIM, DMARC).