Senior Cloud Security Engineer | Azure & Hybrid

Poland and Middle-Eastern Europe; Polska; Remote; PLN 240,000 - 360,000; Full time

Job summary

Xebia is a global AI-first engineering partner seeking a Senior Cloud & Application Security Architect to secure Azure environments and hybrid setups. You will drive security by design, coordinate vulnerability management, and guide DevSecOps practices across CI/CD pipelines to build a trusted cloud ecosystem.

The role requires strong hands-on experience in cloud security, Azure workloads, and secure development, with a focus on modern security frameworks and cross-team influence within a

Qualifications

• Strong experience in Cloud Security and Application Security.
• Hands-on with securing Microsoft Azure environments.
• Experience with hybrid infrastructure and Azure integration.
• Knowledge of CAF and Well-Architected Framework.
• Background in vulnerability management and risk assessment.
• Experience embedding Security by Design in CI/CD/DevSecOps.

Responsibilities

• Assess and document security posture of cloud-based SaaS and on-premises services.
• Coordinate penetration tests, code scanning, and pipeline security assessments.
• Identify gaps and help teams remediate security risks.
• Establish standardized security requirements across products and teams.
• Drive adoption of Security by Design across cloud and app environments.
• Define and improve cloud security practices for Azure-based/hybrid environments.
• Integrate security controls into development and CI/CD processes.
• Support security roadmap development and ongoing improvements.

Skills

Cloud Security

Application Security

Azure Security

Hybrid Infrastructure

AWS Security

Security by Design

CI/CD Security

DevSecOps

Vulnerability Management

Threat Modelling

Kubernetes Security

Tools

Azure DevOps

GitHub Actions

GitLab CI/CD

Terraform

Container Security

Job description

Xebia is a global AI-first, digital transformation, and engineering partner.With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions.

We specialize in Artificial Intelligence, Data and Cloud, Intelligent Automation, and Digital Products, combining deep technical expertise with a strong focus on engineering excellence and a people-first culture.

In the CEE region, we’re a team of nearly 1,000 experts delivering modern applications, data platforms, and AI solutions for clients such as Millennium, ING, Play, Edenred, Arabian Drilling, FedEx, Leroy Merlin, Truecaller, Volotea, Schmitz Cargobull, and many, many more.

You will be:

• assessing and documenting the security posture of cloud-based SaaS and on-premises services,
• organizing and coordinating penetration tests, code scanning, cloud infrastructure scanning, and pipeline security assessments,
• identifying security gaps and helping teams prioritize and remediate security risks,
• establishing standardized minimum security requirements across products and development teams,
• driving the adoption of Security by Design principles across cloud and application environments,
• defining and improving cloud security practices for Azure-based and hybrid environments,
• integrating security controls and scanning practices into development and CI/CD processes,
• supporting the development of a security roadmap and driving continuous security improvements across the organization.

Your profile:

• strong experience in Cloud Security and Application Security,
• practical experience using AI-powered assistants (e.g. Claude Code, GitHub Copilot, Cursor) to improve productivity, quality, or decision-making in software delivery,
• strong hands-on experience securing Microsoft Azure environments and workloads,
• experience securing hybrid infrastructure, particularly on-premises environments integrated with Azure,
• good understanding of AWS security services and best practices,
• experience with cloud security architecture and governance, including Azure Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF),
• a good understanding of Windows-based environments and enterprise infrastructure,
• hands-on experience with vulnerability management, security assessments, security scanning, penetration testing coordination, threat modelling, and risk assessment,
• experience implementing Security by Design principles across cloud and application environments,
• experience integrating security controls and scanning into CI/CD and DevSecOps processes,
• familiarity with Azure DevOps, GitHub Actions, and GitLab CI/CD,
• strong knowledge of modern security frameworks and best practices,
• excellent communication and stakeholder management skills and can translate technical security topics into business language,
• strong workshop facilitation and consulting mindset and can influence teams without direct authority,
• experience creating security strategies or operating models at organizational level as an advantage,
• experience with .NET environments, Terraform or other Infrastructure as Code tools, and container/Kubernetes security as a plus,
• relevant certifications such as CISSP, CCSP, AZ-500, SC-100, or AWS Security Specialty as an advantage,
• fluent English (at least B2 level).

Work from the European Union region and a work permit are required.

Recruitment Process:

CV review – HR call – Interview – Team / Client Interview – Decision

Create a Job Alert

Interested in building your career at Poland and Central-Eastern Europe? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Where did you find this job offer? * Select...

What is your notice period? * Select...

What is your preferred form of cooperation? * Select...

What are your financial expectations? *

Please specify if the given salary is in net or gross value * Select...

Please specify if the salary expectation are provided hourly or monthly * Select...

Currency of the salary expectations * Select...

What country do you currently reside in? * Select...

Do you have documents entitling you to work in the European Union (valid work permits to work in the EU)? * Select...

Do you speak English at a minimum B2 level? * Select...

I declare that I agree to the processing of my Personal Data contained in the content of documents sent in response to the job/cooperation offer, and Personal Data collected during a possible recruitment interview, in order to participate in future recruitment processes conducted by the Administrator, i.e. Xebia sp. z o.o. with its registered office in Wrocław. * Select...

I declare that I agree to sending to my e-mail address indicated in the content of recruitment documents, any information about recruitment processes conducted by the Administrator, i.e. Xebia sp. z o.o. with its registered office in Wrocław. * Select...

The administrator of Personal Data is Xebia sp. z o.o. with its registered office in Wrocław, ul. Sucha 3, 50-086 Wrocław, KRS: 0000978067, NIP: 8971719181, REGON: 020363023 with a share capital of PLN 37 168 600.00. Your data contained in the CV will be processed only for recruitment purposes. The legal basis for the processing of your personal data is art. 221 cl. 1 of the Labour Code. If you provide separate consent, we will process your personal data also for future recruitment purposes. You have the right to access your personal data, to correct them, to remove them, to restrict their processing, to transfer your data, to submit an objection, to withdraw consent to data processing any time without affecting the lawfulness of processing carried out on the basis of the consent before it was withdrawn. In order to exercise the abovementioned rights, please send an e-mail with your request to: [e-mail]. If you believe that your data are processed illegally, you can submit a complaint to the supervisory body with its registered office in ul. Stawki 2, Warsaw. We may only disclose your personal data if you provide consent thereto or to authorised bodies, when necessary. * Select...

By checking this box, I agree to allow Poland and Central-Eastern Europe to store and process my data for the purpose of considering my eligibility regarding my current application for employment. *