Senior Security Engineer: Azure Zero Trust & SSDF Expert

GlobalLogic; Poland; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Empowering Projects

Empowering Growth

DE&I Matters

Career Development

Comprehensive Benefits

Flexible Opportunities

Job summary

GlobalLogic in Poland is seeking a Senior/Principal Security Engineer to lead security activities across the SSDF framework and secure cloud architectures. You will collaborate with SOC, engineering and architecture teams to design, implement, and govern secure solutions in Azure and related services.

The role emphasizes Zero Trust, IAM, encryption, and secure communications, with hands-on scripting and vulnerability management.

Qualifications

• Knowledge of secure architecture and secure design, including Zero Trust.
• Strong knowledge of cybersecurity processes – SSDF by NIST.
• Experience Azure cloud security and CI/CD pipelines.
• Expertise in vulnerabilities management and secure data handling.
• Ability to collaborate across SOC, development and architecture teams.

Responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders (Head of Engineering & CISO)
• Collaboration with SOC, Development, architects team
• Vulnerabilities management
• Solution design and requirements creation
• Supporting/advising development team in security challenges

Skills

Secure architecture design

Zero Trust

Cross-team collaboration

Identity and Access Management

Scripting (Bash, Python, PowerShell)

Security best practices

Tools

Azure cloud

Azure Kubernetes Security

Azure IdP Entra/B2C

Azure Pipelines

Snyk

SonarCloud

Job description

GlobalLogic in Poland is seeking a Senior/Principal Security Engineer to lead security activities across the SSDF framework and secure cloud architectures. You will collaborate with SOC, engineering and architecture teams to design, implement, and govern secure solutions in Azure and related services.

The role emphasizes Zero Trust, IAM, encryption, and secure communications, with hands-on scripting and vulnerability management.