security engineer

Enfint; Warszawa; On-site; PLN 260,000 - 350,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Enfint ищет опытного инженера по cloud security для руководства и внедрения защиты облачных инфраструктур в многоплатформенной среде. Кандидат будет работать с командами DevOps/SRE, совершенствовать контроль доступа, сетевые сегменты и хранение ключей.

Требуется глубокий опыт AWS, Azure и/или GCP, знание IaC и контейнерной безопасности, а также способность подготавливать аудиторские доказательства и отчеты для руководства.

Qualifications

• 6–9 лет опыта в security engineering или cloud security.

Responsibilities

• Ведёт инициативы по улучшению облачной безопасности в AWS/Azure/GCP.
• Проводит оценки безопасности облака и ревью конфигураций.
• Руководит или участвует в программах управления уязвимостями.
• Реализует защиту контейнеров и Kubernetes, CI/CD и IaC.
• Развивает процессы соответствия и отчетности для управляемости рисками.
• Согласовывает и внедряет безопасность в pipeline и IaC.
• Развивает безопасные базовые настройки облачных рабочих нагрузок.

Skills

Cloud security

AWS security

Vulnerability management

Kubernetes security

Scripting (Python)

Security standards knowledge

Communication skills

Multi-cloud experience

Tools

Wiz

Terraform / IaC

CSPM tools

CI/CD security

OWASP knowledge

Job description

Описание

Nasuni provides an unstructured data foundation for enterprise teams, offering an AI-ready platform that manages, protects, and activates file data to enable global collaboration and intelligent automation.

Задачи

• Lead initiatives to improve cloud security posture across AWS, Azure, and GCP, including IAM hardening, network segmentation, and encryption;
• Conduct cloud security assessments and configuration reviews using Wiz and cloud-native tools;
• Drive zero-trust initiatives and implement cloud-native security controls;
• Evaluate and implement security controls for container and Kubernetes workloads, CI/CD pipelines, and Infrastructure as Code;
• Lead execution and continuous improvement of the vulnerability management program;
• Assess and enforce vulnerability SLAs and risk-based prioritization frameworks;
• Analyze vulnerability data, synthesize trends, and produce executive‑ready reporting;
• Drive systemic remediation through collaboration with DevOps, SRE, and engineering teams;
• Partner with DevOps and SRE teams to embed security controls into CI/CD pipelines and IaC templates;
• Define and enforce secure configuration baselines across cloud workloads and infrastructure;
• Support complex incident responses and contribute to detection engineering efforts;
• Own technical evidence preparation and control documentation for audit and compliance;
• Mentor colleagues and lead security tooling evaluations;
• Design and scale AI‑assisted security workflows for vulnerability analysis and operational efficiency.

Требования

• 6–9 Years of experience in security engineering or cloud security;
• Demonstrated ownership of complex cloud security workstreams in multi‑cloud environments;
• Proven experience leading or contributing to vulnerability management programs;
• Deep hands‑on expertise with AWS security (IAM, VPC, GuardDuty, Security Hub, CloudTrail, KMS);
• Strong knowledge of CSPM tools, container security, Kubernetes security, and IaC tooling;
• Solid understanding of network security, protocols, and infrastructure security fundamentals;
• Experience with scripting or automation (Python, Bash);
• Ability to validate AI‑generated outputs using security expertise and structured review mechanisms;
• Strong communication skills for explaining security risks to technical and non‑technical stakeholders;
• Nice to have: Azure and GCP experience, Wiz experience, CI/CD security integration, NIST CSF, CIS Benchmarks, OWASP, AWS Security Specialty, CISSP, CCSP, GIAC GCSA.

Условия

Office role with relocation support.