Senior Security Engineer: Cloud & App Security Lead

Simple Life App; Polska; On-site; PLN 180,000 - 260,000; Full time

Job summary

Simple Life is seeking a hands-on Senior Security Engineer to join our engineering-driven team. You will design, implement, and improve security controls across our Go-based applications, cloud environments, and development pipelines on AWS and Kubernetes.

You’ll work with engineering and SRE to embed security into the SDLC, automate protection, and ensure compliance with HIPAA, SOC 2, and ISO 27001 while empowering teams with practical security tooling.

Qualifications

• 5+ years of relevant experience in security engineering or related field.
• Hands-on experience in application security and cloud security.
• Experience with AWS and Kubernetes production environments.
• Familiar with HIPAA, SOC 2, ISO 27001.

Responsibilities

• Improve application security across the SDLC with threat modeling and secure design reviews.
• Implement security controls in AWS and Kubernetes/EKS, including IAM and network policies.
• Develop security automation and infrastructure-as-code policies.
• Investigate vulnerabilities and coordinate remediation with engineering teams.
• Support security assessments, pen tests, and fix findings.
• Enhance security logging, detection, and incident response capabilities.
• Ensure controls for HIPAA, SOC 2, and other requirements.
• Lead security projects from design to rollout and improvement.

Skills

Security engineering

Application security

Cloud security

Go/Python code

CI/CD security

Vulnerability management

IAM & networking

Incident response

English proficiency

Tools

AWS

Kubernetes

Job description

Simple Life is seeking a hands-on Senior Security Engineer to join our engineering-driven team. You will design, implement, and improve security controls across our Go-based applications, cloud environments, and development pipelines on AWS and Kubernetes.

You’ll work with engineering and SRE to embed security into the SDLC, automate protection, and ensure compliance with HIPAA, SOC 2, and ISO 27001 while empowering teams with practical security tooling.