Tech Stack
Job Description, Responsibilities & Requirements
About the Position
InfoSec (DevSecOps) Engineer - P0247
Kraków, Lesser Poland Voivodeship, Poland | Marketing and Advertising | Full-time
About LoopMe
LoopMe is the global leader in brand performance, redefining brand advertising for the digital world and bringing brands into apps. Our platform runs patented machine learning models across billions of consumer signals in real time, optimising campaigns toward outcomes like purchase intent, brand lift, and foot traffic rather than proxy metrics like clicks. The result is 2–5x better performance than industry benchmarks, at scale.
Responsibilities
- Develop and implement information security policies and protection procedures across the organisation
- Perform risk assessments, security audits, and threat analysis to maintain and improve our security posture
- Monitor, respond to, and investigate security incidents using SIEM, DLP, WAF, and related tooling
- Integrate DevSecOps practices into development workflows, including Secure SDLC and code reviews
- Ensure compliance with security standards including ISO/IEC 27001, NIST, OWASP, and CIS Controls
- Support secure architecture for GCP, Kubernetes, ClickHouse, Kafka, PostgreSQL, and Envoy
- Lead proof-of-concept evaluations for new security integrations and contribute to security budget discussions with product and leadership stakeholders
- Deliver cybersecurity awareness training to employees across the business
Requirements
- 2+ years of experience in InfoSec or DevSecOps roles, preferably in a cloud environment (GCP, AWS, or Azure)
- Proficiency securing infrastructure across GCP, Kubernetes, ClickHouse, Kafka, PostgreSQL, and Envoy
- Solid understanding of network protocols (TCP/IP, DNS, HTTP/S, VPN) and core security principles including encryption, authentication, and access control
- Experience with SIEM systems, vulnerability management tools, and IAM/SSO/MFA solutions such as Okta or Azure AD
- Incident response and forensics experience, with working knowledge of ISO/IEC 27001, NIST, OWASP, and DevSecOps principles
Nice to Have
- Scripting skills in Bash, Python, or PowerShell for security automation
- Relevant certifications such as CISSP, CISM, CompTIA Security+, or GCP Security Engineer
- Experience communicating security topics clearly to non-technical stakeholders
We Offer
- Hybrid working
- Flexible schedule
- 1 month work-from-anywhere
- Annual performance bonus
- Multikafeteria (sport/culture card)
- LoopMe Gives Back
- Learning & development support
About the Company
LoopMe is an AI company solving one of advertising's hardest problems: making brand advertising actually measurable - and making it perform. Our platform runs patented machine learning models across billions of consumer signals in real time, optimising campaigns toward outcomes like purchase intent, brand lift, and foot traffic rather than proxy metrics like clicks. The result is 2–5x better performance than industry benchmarks, at scale.
Note: To all recruitment agencies: LoopMe does not accept agency resumes. Please do not forward resumes to our jobs career page, LoopMe employees or any other company location. LoopMe is not responsible for any fees related to unsolicited resumes.