Infrastructure Security Engineer

Visa Hunt; Poland; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote opportunity

Vacation 28 days

Wellness days 7

Referral bonuses up to $5000

Training reimbursement 50%

Health benefits up to $1000/year

Workspace cost reimbursement every 3y

English lessons discount

Office equipment provided

Merch and team events

Job summary

Social Discovery Group (SDG) is a global team delivering social discovery products, with a remote-friendly culture and a track record as a Great Place to Work. We are seeking an Infrastructure Security Engineer to design and secure our cloud and on‑prem networks, focusing on Zero Trust, vulnerability management, and incident response.

You will lead end-to-end security for infrastructure, onboard new data sources to SIEM, and coordinate tests and remediation across teams.

Qualifications

• 3+ years in infrastructure/network security.
• Hands-on experience with Zero Trust Network Access platforms.
• Experience hardening and managing endpoints (baseline configuration, patching, EDR/antivirus).
• Experience designing network segmentation (VLANs, firewall zones, microsegmentation).
• Experience running a Vulnerability Management process (CVSS, remediation SLAs).
• Experience building/tuning SIEM detections and onboarding log/data sources.
• Experience coordinating or leading incident response for infrastructure security incidents.

Responsibilities

• Design, implement, and maintain Cloudflare Zero Trust architecture (Access, Gateway, Tunnel).
• Harden and protect endpoints through baseline configuration, patching, and EDR/antivirus management.
• Run the infrastructure Vulnerability Management process: identify, assess, prioritize, and track remediation.
• Build and maintain security monitoring capabilities, including onboarding new log/data sources into the SIEM.
• Design and enforce network segmentation (VLANs, firewall zones, microsegmentation).
• Coordinate infrastructure-focused penetration tests and drive remediation of findings.
• Coordinate incident response for infrastructure security incidents.

Skills

Infrastructure security

Zero Trust access

Endpoint hardening

Network segmentation design

Vulnerability management

SIEM detections

Incident response coordination

Tools

Cloudflare Zero Trust

Job description

Social Discovery Group (SDG) is a group of social discovery companies. SDG solves the problems of loneliness, isolation, and disconnection - transforming virtual intimacy into the new normal. SDG’s products redefine the way people interact and connect with one another.

Our portfolio includes social entertainment platforms designed to connect people online across different cultures and regions of the world.

We bring together a team of like‑minded people and IT professionals who specialize in creating and developing globally impactful social discovery products. Our international team of digital nomads works remotely from all over the world.

We’re proud to be a two‑time “Great Place to Work” winner (USA & Japan, 2024–2025) and a Top‑5 Company for Work‑From‑Anywhere Jobs (FlexJobs, 2025).

We are looking for an Infrastructure Security Engineer.

Your main tasks will be:

• Design, implement, and maintain Cloudflare Zero Trust architecture (Access, Gateway, Tunnel, One Client);
• Harden and protect endpoints through baseline configuration, patching, and EDR/antivirus management;
• Run the infrastructure Vulnerability Management process: identify, assess, prioritize, and track remediation of vulnerabilities;
• Build and maintain security monitoring capabilities, including onboarding new log/data sources into the SIEM;
• Design and enforce network segmentation (VLANs, firewall zones, microsegmentation) to reduce lateral movement risk;
• Coordinate infrastructure-focused penetration tests and drive remediation of findings;
• Coordinate incident response for infrastructure security incidents.

We expect from you:

• 3+ years in infrastructure/network security;
• Hands‑on experience with Zero Trust Network Access platforms;
• Experience hardening and managing endpoints (baseline configuration, patching, EDR/antivirus);
• Experience designing network segmentation (VLANs, firewall zones, microsegmentation);
• Experience running a Vulnerability Management process (CVSS, prioritization, remediation SLAs);
• Experience building/tuning SIEM detections and onboarding new log/data sources;
• Experience coordinating or leading incident response for infrastructure security incidents.

What do we offer:

• REMOTE OPPORTUNITY to work full-time;
• The initial pay level or pay range for this role will be shared with candidates during the recruitment process and before the commencement of employment;
• Vacation 28 calendar days per year;
• 7 wellness days per year (time off) that can be used to deal with household issues, to lie down and recover without taking sick leave;
• Bonuses up to $5000 for recommending successful applicants for positions in the company;
• 50% payment for professional training, international conferences, and meetings;
• Corporate discount for English lessons;
• Health benefits. According to the paychecks, if you are not eligible for corporate medical insurance, the company will compensate you with up to $ 1,000 gross per year per employee. This can be spent on self‑purchase of health insurance or on doctor’s fees for yourself and close relatives (spouse, children);
• Workplace organization. The company provides all employees with an equipped workplace and all the necessary equipment (table, armchair, wifi, etc.) in our offices or co‑working locations. In the other locations, the company provides reimbursement of workplace costs up to $ 1000 gross once every 3 years, according to the paychecks. This money can be spent on the rent of the co‑working room, on equipping the working place at home (desk, chair, Internet, etc.) during those 3 years;
• Internal gamified gratitude system: receive bonuses from colleagues and exchange them for our merchandise, team building activities, massage certificates, etc.