Security & Compliance Engineer — ISO 27001, SOC 2, SIEM

Nomagic, Inc.; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Equity for every employee

Relocation package

Hybrid work from Warsaw

Job summary

Nomagic, Inc. is seeking a Security & Compliance Engineer to own security and compliance across the company, from corporate to edge deployments. You’ll collaborate with a strong DevOps/Infrastructure team and security consultants to implement robust controls and policies.

You’ll help shape policy for AI tooling, manage third-party risk, and ensure secure endpoints, identity, and networks while operating in an English-speaking, hybrid environment based in Warsaw.

Qualifications

• 5+ years in information security or a similar role.
• Understanding of endpoint and identity security - MDM, SSO, SAML, access control models.
• Solid understanding of network security architecture - segmentation and secure remote access.
• Hands-on experience with a GRC framework (ISO 27001, SOC 2) including third-party risk assessments.
• Comfortable writing and reviewing security policies.
• Scripting ability for automation - Python, Bash, PowerShell, or similar.
• Fluent communication in English.

Responsibilities

• Own security and compliance across cloud, edge, and on-prem infrastructure.
• Lead ISO 27001 and SOC 2 posture day-to-day with vendor assessments.
• Define security standards for endpoints, identity, and network; verify outsourced IT implementation.
• Run third-party risk processes and security questionnaires.
• Monitor and respond to security events — SIEM triage and improved detection.
• Collaborate with DevOps/Infrastructure on security across cloud, edge, and OT environments.

Skills

Information security

Endpoint security

Identity security

Network security

GRC framework

Policy writing

Scripting

English fluency

Tools

Wazuh SIEM

Vanta

Drata

Tugboat Logic

Job description

Nomagic, Inc. is seeking a Security & Compliance Engineer to own security and compliance across the company, from corporate to edge deployments. You’ll collaborate with a strong DevOps/Infrastructure team and security consultants to implement robust controls and policies.

You’ll help shape policy for AI tooling, manage third-party risk, and ensure secure endpoints, identity, and networks while operating in an English-speaking, hybrid environment based in Warsaw.