Security Operations Lead – AI‑Powered AppSec

Mend.io; Polska; On-site; PLN 466,000 - 700,000; Full time

Job summary

Mend.io is redefining security for AI-powered development, seeking a hands-on Security Operations Lead to drive security across cloud, product, compliance, and customer-facing activities. You’ll partner with Engineering, Product, IT, Sales, Legal and leadership to identify risks, improve controls, respond to issues, and strengthen Mend’s security posture.

You will own day-to-day security operations, lead vulnerability management and incident response, and guide audits such as SOC 2 and ISO

Qualifications

• Experience in Security Operations, Cloud Security, or Product Security.
• Hands-on with cloud security technologies, vulnerability management, incident response, SIEM, WAF, CSPM, and IAM.
• Experience collaborating with Engineering and Product teams.
• Familiarity with SOC 2, ISO 27001, and security frameworks.
• Strong analytical, communication, and cross-functional collaboration skills.

Responsibilities

• Assess security risks across Mend’s product and cloud infrastructure and drive a prioritized improvement plan.
• Own day-to-day cloud and infrastructure security operations, including SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management.
• Lead vulnerability management, including Mend’s HackerOne bug bounty program and remediation coordination with Engineering.
• Lead security incident response and support disaster recovery planning and testing.
• Support customer-facing security activities, including questionnaires, RFPs, and technical security discussions during sales cycles.
• Drive audit and certification activities, including SOC 2 and ISO 27001/27701/27017, and maintain compliance controls and evidence through Drata.
• Manage third-party security assessments and support security and AI governance.
• Serve as a key internal security advisor for teams across the company.
• Own and improve security tooling, automation, and operational processes.

Skills

Security Operations

Cloud Security

Incident Response

SIEM

WAF

IAM

Cross-functional Collaboration

Risk Assessment

HackerOne

Tools

Drata

Job description

Mend.io is redefining security for AI-powered development, seeking a hands-on Security Operations Lead to drive security across cloud, product, compliance, and customer-facing activities. You’ll partner with Engineering, Product, IT, Sales, Legal and leadership to identify risks, improve controls, respond to issues, and strengthen Mend’s security posture.

You will own day-to-day security operations, lead vulnerability management and incident response, and guide audits such as SOC 2 and ISO