Infrastructure Security Engineer

Toyota Digital HUB & SSC (TME NV/SA); Wrocław; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Sport card

Lunch subsidy

Car leasing

Language lessons

Bonuses

Job summary

Toyota Digital HUB & SSC (TME NV/SA) in Wroclaw invites applications for an Infrastructure Security Engineer. The role focuses on securing core IT infrastructure, managing segmentation, vulnerability remediation, and incident response within a hybrid work setup.

The candidate will collaborate with multiple teams, drive secure operations at scale, and contribute to continuous improvement with a practical delivery mindset. A Master’s degree or equivalent experience is required.

Qualifications

• Master’s degree or equivalent relevant experience.

Responsibilities

• Act as Technical Lead for Cybersecurity projects in Network security, Remote Connectivity, Vulnerability Protection and Endpoint Security.
• Support and improve endpoint security controls, including device hardening, endpoint protection, firewall policies, and compliance baselines.
• Develop, review and audit security/compliance baselines, guiding endpoint and infrastructure teams on implementation, evaluating and documenting exceptions.
• Review, Design and Develop our Technical Security landscape by acting as Technical lead of services and technologies in Infrastructure Security team.
• Investigate and resolve security issues on endpoints and infrastructure, including security alerts, malware events, vulnerability reports and incidents.
• Collaborate with infrastructure, identity, network, and security teams on controls such as VPN, DLP, certificate-based authentication, and cloud-connected device policies.
• Create and maintain clear documentation and guidance, while contributing to knowledge sharing and continuous improvement across the team.
• Develop, monitor and report on Security KPIs.

Skills

Network security

Vulnerability management

Endpoint security

Security baselines

OS hardening

Scripting/Automation

Cloud security

Incident response

Interpersonal collaboration

AI in infra security

Education

Master’s degree or equivalent

Tools

PowerShell

Python

Bash

EDR / anti-malware tools

Security monitoring tools

Job description

O projekcie:

Team description:

The Cybersecurity team is a strategic function within TME’s IT & Digital division, supporting the transformation of Toyota’s European IT operations. Joining this team means contributing to resilient security frameworks, helping manage cyber risks in a modern enterprise environment, and playing a visible role in building a proactive security culture across digital assets and operations. The team’s mission is to protect Toyota’s information assets, support regulatory compliance, and enable secure innovation across the organization.

Role summary:

We are looking for an Infrastructure Security Engineer who is motivated to help strengthen secure infrastructure across a complex enterprise environment.

The Infrastructure Security Engineer is responsible for securing Toyota’s core IT infrastructure: servers, data centers, hypervisors, networks, storage systems, and endpoints. This role handles architecture reviews, vulnerability remediation, segmentation, privileged‑access governance, and incident response across critical environments. You will work across endpoint engineering, modern device management, and security operations, collaborating with infrastructure, identity, network, and support teams. This role offers the opportunity to combine technical depth with practical delivery while contributing to continuous improvement, secure operations at scale, and a collaborative team environment.

Formal Role Details:

• Job Type: Permanent contract
• Start date: From October 2026
• Location: Wrocław, Silver Tower Office Center
• Working Pattern: Hybrid – typically 2 to 3 days per week in the office, offering flexibility alongside collaboration with the team
• Reporting line: Manager Infrastructure Security
• Education level: Master’s degree or equivalent relevant experience

What we can offer you:

• Health insurance
• Sport card
• Lunch subsidy
• Car leasing
• Languages lessons
• Bonuses

Wymagania - Qualifications:

• Relevant experience in infrastructure security, network security or a related field.
• Experience in hardening of various operating systems (Windows/Linux/MacOS), mobile, or cloud-connected endpoints within a structured IT or security function.
• Experience working in enterprise or complex environments with a range of stakeholders and technologies.

We welcome candidates from different backgrounds, experiences, and career paths, including those with transferable skills or equivalent practical experience. If you meet many of the requirements but not every single one, we still encourage you to apply. We value curiosity, collaboration, and a willingness to learn alongside technical experience.

Core Technical Skills:

• Experience with Network segmentation, firewalling and remote connectivity.
• Experience in analyzing security baselines, detecting and remediating deviations.
• Good understanding of secure OS configuration, compliance baselines, and endpoint lifecycle management, including servers and mobile devices.
• Experience with endpoint protection technologies such as anti-malware, EDR, device control, and related security controls.
• Experience with vulnerability management processes, including risk-based prioritisation, remediation tracking, and coordination with infrastructure teams.
• Understanding of security controls for server, virtualization, storage, and data‑centre infrastructure environments.
• Practical scripting or automation experience using PowerShell, and ideally Python or Bash.
• Experience with AI use cases in infrastructure security, such as security monitoring, vulnerability prioritization, incident triage, anomaly detection, and automation of repetitive operational tasks, with an understanding of responsible and secure AI usage.

Communication & Collaboration Skills:

• Ability to explain technical concepts clearly to a range of audiences.
• Strong collaboration skills and the ability to build effective working relationships across teams.
• A proactive mindset with an interest in continuous improvement, operational excellence, and knowledge sharing.

Desirable Skills:

• Familiarity with hybrid-cloud security concepts, cloud-connected infrastructure, and cloud‑native security controls.
• Familiarity with security hardening frameworks and benchmarks such as CIS, ISO 27001, NIST, or equivalent internal standards.

Certifications (Optional):

• CompTIA Security+, EC-Council Certified Network Defender (CND), GIAC Security Essentials (GSEC), Certified Information Systems Security Professional (CISSP), or equivalent certifications

You have a TOYOTA DNA, this means:

• Courage: you are ready to let go of the easy path to reach challenging targets.
• Collaboration: you are a team player, respectful and inclusive in your style, and you take a customer-oriented approach.
• Creativity: your passion drives you to explore innovative ideas and challenge the impossible.
• Curiosity: you combine imagination and fact-based observation.
• Coaching: you share knowledge and feedback with your colleagues and celebrate each other’s success.

Codzienne zadania:

• Act as Technical Lead for Cybersecurity projects in the areas of Network security, Remote Connectivity, Vulnerability Protection and Endpoint Security.
• Support and improve endpoint security controls, including device hardening, endpoint protection, firewall policies, and compliance baselines.
• Develop, review and audit security/compliance baselines, guiding endpoint and infrastructure teams on implementation, evaluating and documenting exceptions.
• Review, Design and Develop our Technical Security landscape by acting as Technical lead of services and technologies in Infrastucture Security team.
• Investigate and resolve security issues on endpoints and infrastructure, including security alerts, malware events, vulnerability reports and .
• Collaborate with infrastructure, identity, network, and security teams on controls such as VPN, DLP, certificate-based authentication, and cloud-connected device policies.
• Create and maintain clear documentation and guidance, while contributing to knowledge sharing and continuous improvement across the team.
• Develop, monitor and report on Security KPIs.