Hybrid Cloud Security Engineer – Azure/GCP, Remote

Allegro; Województwo mazowieckie; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid work model with 4/1 schedule

Annual performance bonus

30 days occasional remote work

Well-located offices in Warsaw and Poz

Training budget and events

Job summary

Allegro is looking for a senior security engineer to secure a large-scale hybrid environment spanning Azure, GCP, and on-premises. You will own security improvements end-to-end, drive vulnerability management, and implement CIS/NIST baselines with measurable controls.

You will collaborate with IAM, network, and service-owner teams to deliver practical security solutions. You will work in a hybrid model with flexible hours and a focus on automation, risk-based prioritization, and maintainable

Qualifications

• Hands-on experience securing cloud environments, preferably Azure and/or GCP, including Kubernetes and container workloads.
• Familiarity with CIS Benchmarks and NIST CSF; translate into practical baselines.
• Experience with security automation, such as workflow orchestration and runbooks.

Responsibilities

• Own security improvements from assessment to implementation and handover.
• Build and maintain security controls across Azure, GCP, and on-premises environments.
• Improve vulnerability-management and patching processes with asset coverage and prioritized remediation.
• Implement security baselines based on CIS Benchmarks and NIST principles with clear remediation paths.
• Strengthen identity and access controls, including MFA and Entra Conditional Access.
• Deliver and operate network and endpoint-security capabilities including SASE and secure web gateways.
• Develop external attack-surface monitoring for domains, IPs, assets, and services; track remediation.
• Maintain technical documentation, runbooks, alerting, and on-call procedures.

Skills

Cloud security

Vulnerability management

Identity security

Security automation

IAM security

Security baselines

English (B2)

Tools

Terraform

Kubernetes

Entra Conditional Access

Job description

Allegro is looking for a senior security engineer to secure a large-scale hybrid environment spanning Azure, GCP, and on-premises. You will own security improvements end-to-end, drive vulnerability management, and implement CIS/NIST baselines with measurable controls.

You will collaborate with IAM, network, and service-owner teams to deliver practical security solutions. You will work in a hybrid model with flexible hours and a focus on automation, risk-based prioritization, and maintainable