Senior Cloud & AppSec Engineer — Remote & Stock Options

airSlate Inc.; Polska; Hybrid; PLN 240,000 - 320,000; Full time

Benefits offered by this job

Remote/hybrid work

Competitive compensation

Stock options

Professional growth

Mental health days

Job summary

airSlate is seeking a Senior Security Engineer (Cloud & AppSec) to join our Security Engineering team. You will help secure our cloud environments and build secure products from the start, while collaborating with cross-functional teams.

You will lead threat modeling, risk assessments, and incident response, with a focus on AWS/GCP security, SAST/DAST/SCA tools, and CI/CD integration. English proficiency is required, with strong communication to non-technical stakeholders.

Qualifications

• 4+ years of professional experience in information security, application security, or related field.
• Hands-on experience securing AWS and/or GCP environments.
• Experience with SAST, DAST, and SCA tools and integrating them into CI/CD.
• Excellent written and spoken English (B2 or higher).

Responsibilities

• Secure our AWS and GCP environments, including IAM, network segmentation, and key management.
• Find and fix misconfigurations and security risks before they impact services.
• Set up security logging, monitoring, and incident response processes.
• Test security of web, mobile, and network applications.
• Lead architecture reviews, threat modeling, and risk assessments with product teams.
• Explain findings clearly and collaborate with engineers to remediate risks.

Skills

Cloud security

Application security

Threat modeling

CI/CD security

Bash

Python

Go

Terraform

English communication

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

airSlate is seeking a Senior Security Engineer (Cloud & AppSec) to join our Security Engineering team. You will help secure our cloud environments and build secure products from the start, while collaborating with cross-functional teams.

You will lead threat modeling, risk assessments, and incident response, with a focus on AWS/GCP security, SAST/DAST/SCA tools, and CI/CD integration. English proficiency is required, with strong communication to non-technical stakeholders.