First Security Owner — Hands-on, Remote SaaS Defender

PeopleForce; Polska; Hybride; PLN 393 000 - 568 000; Plein temps

Avantages offerts par ce poste

100% remote work

Flexible schedule

Direct impact on security

High ownership role

Résumé du poste

PeopleForce is seeking a Senior Security Engineer / Security Owner to become our first dedicated security hire. You will own hands-on security across the product, cloud, and processes, driving practical risk-based improvements and partnering with engineering, Legal, and external providers.

You will shape a security foundation that aligns with business priorities, implement threat modelling, and build security controls from the ground up while staying close to implementation.

Qualifications

• 5+ years of relevant experience in security engineering or related roles.
• Hands-on security expertise across product, application, and cloud security.
• Proficient in secure SDLC, vulnerability management, and risk-based prioritisation.
• Experience with SAST/DAST and IaC/security tooling in a SaaS environment.

Responsabilités

• Identify and reduce real security risks across products and cloud infra.
• Integrate security into SDLC, code reviews, and CI/CD processes.
• Strengthen IAM, access controls, and cloud security for scalable systems.
• Build and run security operations, incident readiness, and coordination with partners.
• Support customer security reviews and translate requirements into controls.

Connaissances

Product security

APIs security

Authentication

Authorization

Secure SDLC

Vulnerability management

Outils

SAST

DAST

Dependency scanning

Secrets detection

IaC scanning

Description du poste

PeopleForce is seeking a Senior Security Engineer / Security Owner to become our first dedicated security hire. You will own hands-on security across the product, cloud, and processes, driving practical risk-based improvements and partnering with engineering, Legal, and external providers.

You will shape a security foundation that aligns with business priorities, implement threat modelling, and build security controls from the ground up while staying close to implementation.