Senior Security Engineer - Platform & Cloud Security

Digital Zone; Poland; On-site; PLN 260,000 - 360,000; Full time

Benefits offered by this job

Top compensation

High-growth environment

Collaborative team

Job summary

DigitalZone seeks a senior security engineer to set the technical direction for security across the platform. This is the most senior individual-contributor security role: you own the hardest problems, do hands-on work, and raise the bar for the engineering org.

You will design secure SDLC across application, cloud, and payment security, run vulnerability management, and align with customers and security vendors to drive strategic outcomes.

Qualifications

• 8+ years in software or security engineering with hands-on depth across application and cloud security.
• Strong track record threat modeling and securing systems that handle payments or sensitive financial and PII data.
• Strong engineering fundamentals: fluency in AWS security, modern authentication and authorisation patterns, and at least one of our core languages.
• Working knowledge of relevant frameworks (PCI DSS, ISO 27001, OWASP, SOC 2) and how to operationalize them without slowing delivery.
• Apply judgment on risk tradeoffs and direct, clear and practical communication with engineers and leadership

Responsibilities

• Design and mature the secure SDLC to support engineers in prioritising and remediating findings.
• Run vulnerability management and coordinate penetration tests, and track key metrics
• Define secure-by-design patterns and success criteria for authentication, cloud networking, and IAM
• Act as the primary liaison between customers and security vendors, driving alignment on findings and remediation priorities

Skills

Application security

Cloud security

Threat modeling

AWS security

Authentication/Authorization patterns

Communication with engineers/leadship

Tools

PCI DSS

ISO 27001

OWASP

SOC 2

Job description

DigitalZone seeks a senior security engineer to set the technical direction for security across the platform. This is the most senior individual-contributor security role: you own the hardest problems, do hands-on work, and raise the bar for the engineering org.

You will design secure SDLC across application, cloud, and payment security, run vulnerability management, and align with customers and security vendors to drive strategic outcomes.