Lead Security Engineer: Cloud, AI & Offensive Security

S&P Global, Inc.; Gdańsk; Hybrid; PLN 180,000 - 360,000; Full time

Job summary

S&P Global, Inc. in Gdańsk, Poland, seeks a senior security testing professional to lead hands-on penetration testing across product portfolios and to direct red team activities within approved scope.

You will drive AI-assisted testing adoption, engage with senior leadership on findings, and mentor teams in advanced security assessment techniques to strengthen the enterprise-wide security posture.

Qualifications

• 5+ years of experience in penetration testing, red teaming, or offensive security engineering with leadership experience.
• Strong web, API, and cloud-native security testing across multiple environments.
• Experience with microservices, CI/CD, containers, and SaaS security frameworks.
• Advanced scripting in Python/Go/JavaScript for tooling and exploit development.
• Familiarity with OWASP Top 10, CWE/SANS Top 25, and secure development practices.
• Excellent communication skills for executive leadership and technical teams.

Responsibilities

• Lead hands-on application and cloud penetration testing across product portfolios.
• Plan, conduct, and supervise red team activities within approved scope.
• Drive AI-assisted testing techniques to improve coverage and quality.
• Engage with senior leadership to explain findings and remediation priorities.
• Develop educational programs and guidance from findings and remediation efforts.

Skills

Penetration testing

Red team leadership

Web/API/Cloud security

CI/CD security

Scripting (Python/Go/JS)

Security governance

Tools

Jenkins

GitLab CI

Azure DevOps

Docker

Kubernetes

Job description

S&P Global, Inc. in Gdańsk, Poland, seeks a senior security testing professional to lead hands-on penetration testing across product portfolios and to direct red team activities within approved scope.

You will drive AI-assisted testing adoption, engage with senior leadership on findings, and mentor teams in advanced security assessment techniques to strengthen the enterprise-wide security posture.