Security Engineer

Smart4Aviation; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private Medical Care

Life Insurance

Referral Program

Training & Certifications

Office Library

Language Course

Wellbeing Support

Job summary

Smart4Aviation is seeking a Security Specialist to join a compact security team in Kraków. You will own end-to-end security for a world-leading aviation product, collaborating with IT, infra (AWS native), dev teams, and governance, reporting to the CIO. This engineering role emphasizes ownership and broader security impact.

You’ll handle security controls, vulnerability management, threat hunting in AWS, IAM hardening, and incident response, while aligning with ISO 27001 and related frameworks.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or closely related field.
• 3–5 years in an engineering role with a security component.
• Hands-on AWS experience (IAM, CloudTrail, CloudWatch, VPC).
• Solid Linux and networking fundamentals; Bash scripting.
• Familiar with SDLC, Git, CI/CD, and automation incl. AI tools.

Responsibilities

• Design and implement security controls across domains.
• Lead vulnerability management, triage findings and fixes.
• Build AWS threat detection, log aggregation and alerting.
• Manage IAM, access reviews and privileged access.
• Develop security metrics to show progress.
• Contribute to incident response and post-incident reviews.

Skills

Security engineering

AWS expertise

Linux fundamentals

CI/CD tooling

Vulnerability management

Analytical thinking

English communication

Problem solving

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Terraform

Ansible

AWS IAM/CloudTrail/CloudWatch

Job description

Have you been dreaming of a job where you can protect one of the best products available on the worldwide aviation market?

As a Security Specialist, you will join a small central security team responsible for end-to-end security and data protection at Smart4Aviation. A small team means impactful work: you will work directly with IT administration, infrastructure (including the AWS cloud, which we consider our native ecosystem), software development product teams and security governance, and you will have direct access to the CIO. It also means that creativity, taking ownership from day one and willingness to understand security in a broader context are valued here. This is primarily an engineering role, not a compliance administration or tool operator role.

Key Requirements ( Skills & Experience)

• 3–5 years of hands‑on experience in an engineering role with a substantial security component (e.g. Security Engineer, SecOps or DevSecOps, an infrastructure engineer who owned security, or a software developer who moved into security).
• University degree in Computer Science, Information Technology, Cybersecurity, Mathematics, or a closely related field.
• Practical experience with AWS, including IAM, CloudTrail, CloudWatch and network security (VPC, Security Groups), as well as a broad understanding of the AWS services that underpin modern enterprise‑grade applications.
• Solid Linux and networking fundamentals, and Bash scripting skills.
• Working understanding of the modern SDLC, including Git, CI/CD, and building custom automations, including with AI tools (e.g. Claude Code) for routine tasks.
• Experience in vulnerability management, including practical understanding of the OWASP Top 10 and sufficient technical knowledge to analyse exploitability (e.g. PoCs) in the context of a specific environment.
• Ability to work with ambiguous problems, across multiple domains and parts of the organisation.
• Independent judgement combined with an understanding of the bigger picture and business context (or openness to building it)
• Ability to raise concerns constructively and stand by well‑reasoned recommendations.
• Readiness to handle recurring operational work, such as periodic reviews and documentation.
• Ability to adapt quickly to unfamiliar areas, including our tech stack.
• Fluent Polish for daily communication and very good command of English, both spoken and written, for correspondence with customers, auditors and vendors.
• Familiarity with security industry best practices, including a broad understanding of security controls, how they relate to each other and which risks they mitigate, within a recognised framework (e.g. ISO 27001, PCI DSS, NIST CSF, NIST 800‑171, OWASP SAMM, BSIMM).
• Familiarity with build and dependency management tools for the JVM/Java ecosystem.
• DevOps skills, including familiarity with Terraform and Ansible.
• Relevant certifications such as OSCP, eJPT, AWS certifications (including AWS Certified Security – Specialty) or CISSP.
• Experience in CSIRT, incident response or cyber forensics, especially in AWS and Linux environments.

Core Responsibilities

• Security controls - designing, implementing, deploying and maintaining all types of security controls, as a part of company's security risk mitigation effort across domains, and making us compliant with industry best practices. Also the technical part of company's ISO 27001 compliance program, with the control reviews, documentation and tracking that go with it.
• Vulnerability management - scanning, triaging findings by real exploitability in our context, driving fixes and temporary mitigations, vulnerability reporting, designing and implementing the processes and automations behind it.
• Threat hunting and detection in AWS - designing, building and running log aggregation, threat detection and alerting across various cloud components, authoring, tuning and maintaining detection rules.
• Identity and access management - reviewing and hardening access to production and infrastructure, managing privileged access, running the daily IAM process.
• Metrics - building and running the measurements to show progress in numbers.
• Incident response - a seat in company's security incident response team, investigating suspected events, contributing to post‑incident reviews.

I hereby give consent for my personal data included in my application to be processed for the purposes of the recruitment process.

If you would like us to contact you in terms of some future career opportunities, please attach also the following clause: "I hereby give consent for my personal data included in my application to be processed for the purposes of the future recruitment processes if relevant vacancies would be available, and kept for the aforementioned purpose for the period of 24 months."

Personal data processing information

Personal data processing information:
1.The controller of your personal data is AzimuthIT Sp. z o.o. Sp.K., ul.Królewska 57/208c,
30-081 Kraków ("Controller").
2.Controller’s representative regarding personal data protection (Data Protection Officer) and exercising data subject’s rights stated below can be contacted at [e-mail].
3.Your personal data will be processed for the purpose of current and future recruitment - pursuant to Article 6(1)(a) of the EU General Data Protection Regulation, the Polish Personal Data Protection Act and Article 22(1 )of the Polish Labor Code. Following legitimate interests, during recruitment process a former employer can be contacted, pursuant to 6(1)(f) of the EU GDPR.
4.Your personal data may be processed for the purposes of future recruitment processes with respect to the same or different positions. When consented, the data will be kept for 24 months, at the applicant’s request they can be also deleted immediately after the recruitment process.
5.You have the right to request the controller to access your personal data, the right to rectify it, delete or limit processing, the right to object to the processing, the right to transfer data, the right to withdraw your consent at any time. You have the right to complain to the supervisory authority (Urząd Ochrony Danych Osobowych). You also have the right, where AI tools influenced a decision affecting you, to obtain meaningful information about the role of AI in that decision and the main factors considered (EU AI Act Art. 86). Such a request can be sent to [e-mail].
6.Your personal data will be shared within entities of the Smart4Aviation Group (including Smart4Aviation Technologies B.V and AzimuthIT Sp. z o.o. sp. k.) and their employees directly involved in your recruitment process.
7.Your personal data may be processed with the assistance of AI tools (for example, to summarise skills from CV or coding task submission). AI is used to support our recruiters; it does not make recruitment decisions, which are always taken by humans. Before your data is sent to an AI tool, direct identifiers are removed. We use AI services provided under a contract that prohibits the vendor from using your data to train their models. If you have a specific reason that AI‑assisted processing would be unfair to you (for example, an accessibility need), please contact [e-mail] before applying.
8.Your data might be transferred between Smart4Aviation branches, including those outside European Economic Area, and to AI service providers acting as our processors (Anthropic, USA, under Standard Contractual Clauses).

Time to start working with smart people in a smart company.
It's as simple as that.

Cultural tickets, vouchers, holidays or Multisport. It's your choice.

Referral Program

Recommend your colleagues and get extra bonus.

Working in the office? Get some vitamins.

Office Library

Thoughtful content on programming, project management and more.

Private Medical Care

We ensure 100% coverage
of the employee health care.

Language Course

Improve your language skills
with native speakers.

Life Insurance

Have peace of mind knowing that your
family's financial future is secure.

Trainings

We invest in people.
Become even better at what you do.

Wellbeing - the psychological support

We care not only about your physical health, but also mental one. We provide sessions with psychologists, business coaches and psychodieticians.

Stay connected with S4A Careers

Even if you can't find an open position for yourself,
drop us a line. Maybe we will be looking for
someone like you in the nearest future.
Connect with us