Director of Security Engineering & Operations

Cognism; Województwo mazowieckie; On-site; PLN 350,000 - 520,000; Full time

Job summary

Cognism is seeking a Director of Security Engineering & Operations in Poland. You will own the technical security strategy for Cognism’s web and data products, data fusion engine, and corporate environment, and partner with leadership to mature security across the company.

You will shape threat modelling, CI/CD security, vulnerability management, and AI/LLM security, while guiding an engineering-focused security culture.

Qualifications

• Leadership experience building security programmes from scratch or transforming them in a product-led, engineering-first company.
• Proven ability to influence engineering culture and earn trust while delivering measurable security results.
• Experience managing external security partners (e.g., 24/7 SOC, third-party pen tests) with clear accountability.
• Ability to communicate risk in business terms to execs/boards and in technical terms to engineers.

Responsibilities

• Define and own Cognism's technical security strategy across web, data products, data fusion engine, and corporate landscape.
• Drive secure SDLC adoption, coach security engineers, and embed security in CI/CD.
• Lead risk-driven supply chain security across products and engineering teams.
• Manage 24/7 SOC relationships and maintain a strong, evolving SIEM and incident response playbooks.
• Build and mentor a high-performing security team with clear KPIs and ownership.

Skills

Security leadership

Threat modelling

AppSec expertise

Cloud security

Kubernetes security

AI/LLM security

Incident response

Security governance

Tools

SIEM

SOC operations

GRC tools

Job description

Cognism is seeking a Director of Security Engineering & Operations in Poland. You will own the technical security strategy for Cognism’s web and data products, data fusion engine, and corporate environment, and partner with leadership to mature security across the company.

You will shape threat modelling, CI/CD security, vulnerability management, and AI/LLM security, while guiding an engineering-focused security culture.