Senior Security Engineer: Zero-Trust Cloud Security Leader

GlobalLogic; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Diversity

Equal opportunities

Inclusive environment

Career development

Flexible opportunities

Job summary

GlobalLogic Kraków is seeking a security-focused professional to own SSDF activities and oversee secure architecture for a cutting-edge fleet-decarbonization project. You will work closely with the Head of Engineering and CISO, collaborating with SOC, architects and development teams to address vulnerabilities and design secure solutions.

The role requires expertise in Azure cloud security, encryption, IAM and secure communications, with scripting experience in Bash/Python.

Qualifications

• Knowledge of secure architecture & secure design (e.g. Zero Trust)
• Strong knowledge of cybersecurity processes – SSDF by NIST
• Experience Azure cloud: Azure Kubernetes security, Azure IdP (Entra & B2C)
• Experience with scanning tools: SonarCloud & Snyk
• Vulnerabilities management
• Secure architecture design best practices (e.g. Zero Trust)
• Data encryption, Data anonymization, Secure communication (HTTPS – TLS, PKI)
• Identity and Access Management
• Scripting experience (Bash, Python, PS)

Responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders (Head of Engineering & CISO)
• Collaboration with SOC, Development, architects team
• Vulnerabilities management
• Solution design and requirements creation
• Supporting/advising development team in security challenges

Skills

Secure design

Secure architecture

Cybersecurity processes

Cross-team collaboration

Vulnerability management

Tools

Azure Kubernetes security

Azure IdP (Entra & B2C)

Azure Pipelines

SonarCloud

Snyk

Job description

GlobalLogic Kraków is seeking a security-focused professional to own SSDF activities and oversee secure architecture for a cutting-edge fleet-decarbonization project. You will work closely with the Head of Engineering and CISO, collaborating with SOC, architects and development teams to address vulnerabilities and design secure solutions.

The role requires expertise in Azure cloud security, encryption, IAM and secure communications, with scripting experience in Bash/Python.