Senior Cloud Security Engineer - Azure, Hybrid & DevSecOps

Xebia Group; Polska; On-site; PLN 180,000 - 260,000; Full time

Job summary

Xebia Group seeks a security-focused professional to lead cloud and application security across Azure, AWS, and on-prem environments. You will drive secure software delivery with security-by-design principles and robust risk management.

Responsibilities include coordinating penetration tests, threat modelling, and governance aligned with CAF/WAF, while integrating security into CI/CD and DevSecOps. Excellent English is required; EU work region and permit are necessary.

Qualifications

• Strong experience in Cloud Security and Application Security.
• Hands-on with Azure environments and hybrid infrastructure.
• Familiar with CAF and Well-Architected Framework.
• Fluent English (B2+).

Responsibilities

• Assess and document the security posture of cloud-based SaaS and on-premises services.
• Coordinate penetration tests, code scanning, cloud infrastructure scanning, and CI/CD security assessments.
• Identify security gaps and help teams prioritize and remediate risks.
• Establish standardized minimum security requirements across products and development teams.
• Drive the adoption of Security by Design principles across cloud and application environments.
• Define and improve cloud security practices for Azure-based and hybrid environments.
• Integrate security controls and scanning into development workflows and pipelines.
• Support development of a security roadmap and drive continuous security improvements across the organization.

Skills

Cloud Security

Application Security

Azure Security

Hybrid Infrastructure Security

AWS Security

Security by Design

CI/CD Security

DevSecOps

Azure DevOps

GitHub Actions

GitLab CI/CD

Threat Modelling

Risk Assessment

Vulnerability Management

Security Frameworks

Tools

Terraform

Kubernetes Security

Azure DevOps

GitHub Actions

GitLab CI/CD

Job description

Xebia Group seeks a security-focused professional to lead cloud and application security across Azure, AWS, and on-prem environments. You will drive secure software delivery with security-by-design principles and robust risk management.

Responsibilities include coordinating penetration tests, threat modelling, and governance aligned with CAF/WAF, while integrating security into CI/CD and DevSecOps. Excellent English is required; EU work region and permit are necessary.