Senior Cloud Security & DevSecOps Engineer

Cantor Fitzgerald; Warszawa; On-site; PLN 240,000 - 360,000; Full time

Job summary

Cantor Fitzgerald in Warsaw is seeking a Senior Cloud Security & DevSecOps Engineer to protect our multi-cloud environment across AWS, Azure, and GCP. The role is hands-on and involves leading security issue triage, implementing policy-as-code, and driving automation across platforms.

You will collaborate with platform engineering, dev teams, and vendors to deliver secure, scalable cloud solutions while advancing security in the SDLC and maintaining ITIL-aligned change and incident processes.

Qualifications

• Hands-on cloud security engineer with experience across multiple clouds.
• Experience with CSPM/CNAPP platforms and policy-as-code.
• Ability to mentor junior team members and collaborate with vendors.

Responsibilities

• Lead triage and resolution of complex cloud security issues across AWS, Azure, and GCP with minimal oversight.
• Implement and optimize solutions leveraging CSPM/CNAPP platforms, native cloud controls, and policy-as-code.
• Analyze posture findings, configuration drift, and key risk metrics to ensure security, compliance, and reliability across the cloud estate.
• Drive automation and shift-left initiatives to embed security earlier in the SDLC and enhance operational efficiency.
• Collaborate with platform engineering, application development, vendors, and customers to deliver secure, scalable solutions.

Skills

Ownership mindset

Adaptability

Tools

Prisma Cloud

Defender for Cloud

Job description

Cantor Fitzgerald is a leading global financial services firm specializing in investment banking, capital markets, institutional equity and fixed income sales and trading, commercial real estate, and prime brokerage. With a legacy of over 75 years of financial innovation and integrity, Cantor operates across major financial centres worldwide, delivering excellence and trusted expertise to its clients.

This role is part of a rapidly growing technology hub in Warsaw, which will be instrumental in supporting the company’s global technology expansion and driving innovation across its international operations.

Team Overview:

Cantor’s Information Security team safeguards the Firm’s global cloud estate by securing day-to-day operations across AWS, Azure, and GCP. We collaborate with platform engineering, application development, and third-party vendors to ensure robust controls span identity, workloads, data, and the software supply chain.

The Role:

As a Senior Cloud Security & DevSecOps Engineer, you will play a pivotal role in protecting Cantor’s multi-cloud environment. This is a hands-on technical position where you will:

• Lead triage and resolution of complex cloud security issues across AWS, Azure, and GCP with minimal oversight.
• Implement and optimize solutions leveraging CSPM/CNAPP platforms, native cloud controls, and policy-as-code.
• Analyze posture findings, configuration drift, and key risk metrics to ensure security, compliance, and reliability across the cloud estate.
• Drive automation and shift-left initiatives to embed security earlier in the SDLC and enhance operational efficiency.
• Collaborate effectively with platform engineering, application development, vendors, and customers to deliver secure, scalable solutions.
• Champion ITIL processes for change, incident, and problem management.

Key Responsibilities

• Manage and maintain CSPM/CNAPP platforms (Prisma Cloud, Defender for Cloud), cloud-native security services, and policy-as-code pipelines.
• Perform implementations, configuration changes, and platform upgrades across AWS, Azure, and GCP with precision and accountability.
• Work with vendors and cloud service providers to resolve complex technical issues and maintain product lifecycle management.
• Mentor Junior Team Members, providing technical guidance as needed.
• Stay ahead of emerging cloud and DevSecOps technologies and adapt quickly to evolving threat landscapes.

What We’re Looking For

• Ownership mindset: you will take responsibility for assigned projects, tasks, and incidents and see issues through to resolution.
• Adaptability and curiosity: Eager to learn and master new technologies quickly.

Why Join Us?

• Work on mission-critical infrastructure supporting three leading businesses in financial services and real estate: Cantor Fitzgerald, BGC Partners, and Newmark.
• Exposure to next-generation cloud security technologies, DevSecOps tooling, and automation at scale.
• A culture that values continuous learning, innovation, and collaboration.