Senior Cyber Security Engineer

Description Ciklum; Poland; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Remote work options

Premium medical package through Luxmed

Udemy access and company-paid certs

MyBenefit cafeteria platform

Job summary

Ciklum is seeking a Senior Cyber Security Engineer to join our Poland team. You will embed security across product applications and services, working with engineering to secure SLDC, review vulnerabilities from multiple systems, and respond to security incidents.

Ideal candidates have strong developer mindset, cloud security expertise, and experience with automation in CI/CD. Remote-friendly and global client exposure are part of the role.

Qualifications

• Minimum 2 years of experience in application security or similar role.
• Experience securing cloud-native applications and services.
• Development experience in Python or Go.
• Familiarity with SDLC and source control.
• Experience with supply chain security and SBOMs.
• CI/CD security and container security (Kubernetes) exposure.
• Security certifications such as Security+ or CEH are a plus.

Responsibilities

• Support vulnerability management for applications and microservices.
• Provide guidance on secure authentication, authorization, secrets management, and data security.
• Enhance and implement application security automation in CI/CD pipelines.
• Monitor and triage alerts/logs from security platforms and third‑party services.
• Respond to vulnerabilities from penetration testing programs.
• Collaborate with Engineering, IT, Infrastructure, and Compliance teams on security controls.
• Maintain production security procedures and metrics.
• Identify automation opportunities to improve detection and response.

Tools

Kubernetes

GitHub Actions

AWS

GCP

Python

Go

SBOMs

Job description

Ciklum is looking for a Senior Cyber Security Engineer to join our team in Poland.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As a Senior Cyber Security Engineer, you'll become a part of a cross-functional development team engineering experience of tomorrow. You will support our client's security Team (Production Engineering). This team focuses on securing all product applications and services. This role works closely with engineering teams to embed security within the SLDC and ensures our services are crafted with the highest security standards and quality. You will help review and analyze detection and remediation of vulnerabilities from a variety of systems and services as well as support and respond to various operational activities related to our risk profile from third
party monitoring services.

This role is ideal for someone with strong technical skills, a developer’s mindset, and a passion for securing modern applications and cloud services.

Responsibilities:

• Support vulnerability management for applications and microservices
• Provide guidance on secure authentication, authorization, secrets management, and data security
• Evaluate, enhance, and recommend the implementation of application security automation within CI/CD pipelines to detect and remediate security issues early
• Monitor, analyze, and triage alerts and logs from various security platforms such as Security Scorecard and other third party monitoring services
• Triage, remediate, and escalation security alerts / events / reports
• Stay current on emerging threats, vulnerabilities, and threat actor behaviors, and apply this knowledge to improve detection and response
• Provide support for the response and remediation from vulnerabilities from our penetration testing program
• Collaborate with Engineering, IT, Infrastructure, and Compliance teams to implement security controls aligned with frameworks like NIST, HiTrust, and CIS.
• Maintain production security procedures and metrics
• Develop and research enhanced security training
• Ability to work independently to ensure goals set by leadership are reached, and a team player
• Drive continuous improvement by identifying automation opportunities, integrating emerging best practices, and enhancing detection and response capabilities
• Evaluate and apply AI/LLM based tooling to accelerate triage, deduplicating and correlating findings across scanners, prioritizing by exploitability and business context, and drafting remediation guidance while maintaining human review of results

Requirements:

• Minimum 2 years experience in application security, or similar security roles
• Expertise in cloud environments
• Development experience in any modern programming language (Python, Go, etc.)
• Familiarity with software development lifecycle (SDLC) processes and source control technologies
• Experience with supply chain security (dependency management, SBOMs)
• Exposure to container and CI/CD security (Kubernetes, GitHub Actions, etc.)
• Exposure to offensive security expertise and penetration testing certifications, such as (OSWE, OSCP+, etc.) are highly desirable
• Comfortable writing detection queries and scripts
• Familiarity with regulatory frameworks such as SOC 2, CIS, or HiTrust
• Knowledge of common attack vectors and MITRE ATT&CK framework
• Problem-solving skills and the ability to thrive in a fast-paced, collaborative environment
• Experience with SSO platforms, such as Okta and SAML are a plus
• Experience with AWS, GCP, CDN/edge security tools and services are a plus
• Experience with automation frameworks or scripting in Python, PowerShell, or Bash
• Security certifications such as Security +, or CEH or similar

What’s in it for you?

• Strong community: Work alongside top professionals in a friendly, open-door environment
• Growth focus: Take on large-scale projects with a global impact and expand your expertise
• Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications
• Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands‑on experience with cutting-edge technologies
• Flexibility: Enjoy flexibility – full remote working possibilities
• Care: We’ve got you covered with company-paid premium medical package through Luxmed
• Benefits: Access the MyBenefit cafeteria platform, allowing you to choose perks that best suit your lifestyle and needs

About us:

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting‑edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.

With delivery centers in Wrocław and Gdańsk, our 300+ professionals in Poland drive forward-thinking solutions for global clients. Join a community where collaboration sparks innovation—and your impact reaches millions.

Explore, empower, engineer with Ciklum!

#LI-MP1

Required Skills

• Security Policies / Procedures / Standards