InfoSec (DevSecOps) Engineer

About the Position

InfoSec (DevSecOps) Engineer

LoopMe is an AI company solving one of advertising's hardest problems: making brand advertising actually measurable - and making it perform. Our platform runs patented machine learning models across billions of consumer signals in real time, optimising campaigns toward outcomes like purchase intent, brand lift, and foot traffic rather than proxy metrics like clicks. The result is 2–5x better performance than industry benchmarks, at scale.

We operate a high-load programmatic infrastructure - processing millions of ad requests per second with sub-200ms response times globally. This isn't a layer on top of someone else's stack; it's built from the ground up, in-house, by the team you'd be joining. Founded in 2012 and headquartered in London, we now have 400+ people across 19 cities and have sustained 40% revenue CAGR since 2018. The engineering problems here are real, the ownership is genuine, and the scale is significant.

Responsibilities

• Develop and implement information security policies and protection procedures across the organisation
• Perform risk assessments, security audits, and threat analysis to maintain and improve our security posture
• Monitor, respond to, and investigate security incidents using SIEM, DLP, WAF, and related tooling
• Integrate DevSecOps practices into development workflows, including Secure SDLC and code reviews
• Ensure compliance with security standards including ISO/IEC 27001, NIST, OWASP, and CIS Controls
• Support secure architecture for GCP, Kubernetes, ClickHouse, Kafka, PostgreSQL, and Envoy
• Lead proof-of-concept evaluations for new security integrations and contribute to security budget discussions with product and leadership stakeholders
• Deliver cybersecurity awareness training to employees across the business

Requirements

• 2+ years of experience in InfoSec or DevSecOps roles, preferably in a cloud environment (GCP, AWS, or Azure)
• Proficiency securing infrastructure across GCP, Kubernetes, ClickHouse, Kafka, PostgreSQL, and Envoy
• Solid understanding of network protocols (TCP/IP, DNS, HTTP/S, VPN) and core security principles including encryption, authentication, and access control
• Experience with SIEM systems, vulnerability management tools, and IAM/SSO/MFA solutions such as Okta or Azure AD
• Incident response and forensics experience, with working knowledge of ISO/IEC 27001, NIST, OWASP, and DevSecOps principles

Nice to Have

• Scripting skills in Bash, Python, or PowerShell for security automation
• Relevant certifications such as CISSP, CISM, CompTIA Security+, or GCP Security Engineer
• Experience communicating security topics clearly to non-technical stakeholders

We Offer

• Hybrid working
• Flexible schedule
• 1 month work-from-anywhere
• Annual performance bonus
• Multikafeteria (sport/culture card)
• LoopMe Gives Back
• Learning & development support

About the Company

LoopMe is the global leader in brand performance, redefining brand advertising for the digital world and bringing brands into apps. LoopMe is proud to be carbon neutral, helping to create a more sustainable digital advertising ecosystem.

Location: Kraków, Poland

Employment Type: Full-time

Language: English