Hybrid Cloud Security Engineer — Azure/GCP & Automation

Allegro Ltd.; Warszawa; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Annual bonus

Hybrid work model

Remote work days (30 days)

Job summary

Allegro Ltd. is hiring for a senior security engineer to build, operate and improve security controls across Azure, GCP, and on‑prem environments within a large-scale hybrid setup.

You will own vulnerability management, patching coverage, and cloud security posture management while delivering measurable protections for the organization. You will collaborate with cross‑functional teams to harden identity, network configurations, and automated response playbooks, adopting CIS/NIST baselines and

Qualifications

• End-to-end ownership of security improvements from assessment to handover.
• Experience securing cloud environments (Azure/GCP), Kubernetes, and container workloads.
• Knowledge of vulnerability management, patching, asset inventory, and risk prioritization.
• Familiar with CIS Benchmarks and NIST CSF; translate into technical baselines.
• Identity security including MFA and Entra Conditional Access; policy-as-code with Terraform a plus.
• Knowledge of network security, SASE, DNS, TLS, and secure web gateways.
• Experience with security automation, runbooks, and incident response playbooks.
• Strong English (minimum B2) and collaborative cross-team skills.

Responsibilities

• Take end-to-end ownership of security improvements from risk assessment to implementation.
• Build and maintain security controls across Azure, GCP, and on-premises environments.
• Improve vulnerability management and patching processes with clear remediation.
• Implement CIS/NIST-based baselines with measurable compliance checks.
• Strengthen identity and access controls and policy-as-code practices.
• Develop network and endpoint security capabilities including SASE and secure web gateways.
• Maintain runbooks, documentation, and on-call procedures.
• Partner with engineering, network, IAM, and service owners to deliver pragmatic security solutions.

Skills

Cloud security

Azure

GCP

Kubernetes

Terraform

IAM & MFA

Vulnerability management

Policy as code

SASE

Tools

Terraform

Entra

Job description

Allegro Ltd. is hiring for a senior security engineer to build, operate and improve security controls across Azure, GCP, and on‑prem environments within a large-scale hybrid setup.

You will own vulnerability management, patching coverage, and cloud security posture management while delivering measurable protections for the organization. You will collaborate with cross‑functional teams to harden identity, network configurations, and automated response playbooks, adopting CIS/NIST baselines and