Security and Compliance Engineer

STN Inc; Poland; On-site; PLN 530,705 - 682,335; Full time

Job summary

STN Inc. seeks a Security and Compliance Engineer to own the security operations and compliance posture for the GPU One platform.

The role maintains SOC 2 and SOC 3 programs, supports customer security requirements during sales and operations, and leads security incident response. Responsibilities include managing IAM for platform and customer environments, driving vulnerability management, and coordinating with TAM on customer security requirements.

Qualifications

• 5+ years in information security, GRC, or security engineering.
• Demonstrated SOC 2, ISO 27001, FedRAMP, or comparable compliance experience.
• Strong knowledge of cloud security, network security, IAM, and identity federation.
• CISSP, CISM, CCSP, or equivalent certification.
• Excellent written communication including audit narratives and policy authorship.

Responsibilities

• Maintain SOC 2 Type 2 and SOC 3 compliance programs including control evidence and audit support.
• Manage customer security questionnaires, audits, and penetration test coordination.
• Operate identity and access management (IAM) for both platform and customer environments.
• Drive vulnerability management across infrastructure, platform, and corporate IT.
• Investigate security incidents and lead incident response (IR).
• Maintain security policies, standards, and operating procedures.
• Support customer security reviews and security‑related contract negotiations.
• Coordinate with TAM on customer‑specific security requirements.
• Manage security tooling (SIEM, EDR, vulnerability scanners, IAM/SSO).
• Drive security awareness training and phishing programs across STN.

Skills

Security engineering

GRC

SOC 2

ISO 27001

Cloud security

IAM

Audit narratives

Tools

SIEM

EDR

Vulnerability scanners

IAM/SSO

Job description

Security and Compliance Engineer

Platform and software - shared across customers

Reports to: CISO (or VP, Security)

Location: Remote (US) or Pleasanton, CA (hybrid)

Department: Compliance & Security / Compliance

Position summary

The Security and Compliance Engineer owns security operations and compliance posture for the GPU One (GPUaaS) platform. The role maintains SOC 2 and SOC 3 programs, supports customer security requirements during sales and operations, and leads security incident response.

Key responsibilities

• Maintain SOC 2 Type 2 and SOC 3 compliance programs including control evidence and audit support

• Manage customer security questionnaires, audits, and penetration test coordination

• Operate identity and access management (IAM) for both platform and customer environments

• Drive vulnerability management across infrastructure, platform, and corporate IT

• Investigate security incidents and lead incident response (IR)

• Maintain security policies, standards, and operating procedures

• Support customer security reviews and security‑related contract negotiations

• Coordinate with TAM on customer‑specific security requirements

• Manage security tooling (SIEM, EDR, vulnerability scanners, IAM/SSO)

• Drive security awareness training and phishing programs across STN

Required qualifications

• 5+ years in information security, GRC, or security engineering

• Demonstrated SOC 2, ISO 27001, FedRAMP, or comparable compliance experience

• Strong knowledge of cloud security, network security, IAM, and identity federation

• CISSP, CISM, CCSP, or equivalent certification

• Excellent written communication including audit narratives and policy authorship

Preferred qualifications

• Multi‑tenant or service provider security background

• HIPAA, PCI‑DSS, CMMC, or government compliance experience

• Hands‑on technical security skills (cloud configuration audit, IR forensics)

• Experience supporting AI/ML or data‑sensitive customer workloads