SecOps Engineer

About the Position

We are seeking a SecOps Engineer with 2+ years of professional experience in Security Engineering to join our team in Poland. Responsibilities include infrastructure security monitoring, security audits, and vulnerability management.

Responsibilities

• Infrastructure Security Monitoring: Continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
• Infrastructure Security Audits: Plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
• CIS Compliance & Hardening Assessment: Assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
• Vulnerability Management: Monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
• Security Findings Triage & Escalation: Triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
• Security Posture Management: Continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
• Security Standards & Baseline Compliance: Ensure infrastructure complies with approved security standards, baselines, and security requirements.
• Security Control Validation: Verify that implemented security controls are properly configured and effectively mitigate the intended risks.
• Security Risk Identification & Reporting: Identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
• Data Security: Ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
• Patch Management Monitoring & Compliance: Monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure timely remediation.

Requirements

• Core Skills:

  • Linux systems security
  • Network security
  • CIS Benchmarks
  • Vulnerability management
  • Security monitoring
  • Patch management
  • Cloud infrastructure security
  • Kubernetes security
  • Infrastructure as Code
  • Security controls
  • English

• Secondary Skills:

  • Kubernetes security hardening
  • OpenStack security
  • AWS security
  • Python
  • Bash
  • CI/CD pipelines
  • Analytical thinking
  • Communication skills
  • Collaboration skills

Nice to Have

• Experience with Kubernetes security hardening and cluster security assessments.
• Experience with OpenStack security.
• Experience with AWS security and AWS security assessment frameworks.
• Experience automating security checks and operational processes using Python, Bash, or similar scripting languages.
• Experience integrating security controls into CI/CD pipelines.

We Offer

• An exciting and challenging role in a fast-growing group of companies.
• A collaborative and inspiring work environment with passionate experts and leaders who foster a friendly culture and a success-driven mindset.
• Modern offices in Warsaw, Limassol, Kyiv, Almaty, and Yerevan, with the flexibility to work remotely or on-site while building valuable professional connections.
• Modern corporate equipment based on macOS or Windows, with additional equipment provided when needed.
• Paid vacation, sick leave, personal days, and additional days off.
• Corporate health insurance program to support your well-being.
• Employee referral program with bonus opportunities.
• Learning and development programs, including regular internal training, compensation for external education, and attendance at international professional conferences.
• Mentoring and coaching rewards program.
• In-house Travel Service.
• A wide range of internal activities, including an employee platform with quests, gamification, gifts, and company news, as well as RedCore clubs for movie, book, and pet lovers, and themed office events.
• Corporate events and team-building activities.

About the Company

[Company description if present]