Cloud Security Engineer CNAPP

Cloud Security Engineer (CNAPP)

We are looking for an experienced Cloud Security Engineer who will be responsible for designing, building, and developing security mechanisms in AWS, Azure, GCP, and AliCloud environments. The role focuses on the development and optimization of a CNAPP class platform (e.g. Wiz) and on the automation of security controls on an enterprise scale.

Key responsibilities

• Conducting architectural reviews (security design reviews) for applications and workloads migrating to the cloud

• Designing and implementing detective and responsive controls in the environments:

  • Amazon Web Services

  • Microsoft Azure

  • Google Cloud Platform

  • Alibaba Cloud

• Automating cloud configuration audits to detect misconfiguration and drift

• Integrating security tools using APIs and recommending configuration changes to improve their effectiveness

• Evaluation and implementation of solutions provided by vendors in the cloud security area

• Collaboration with Cloud Operations teams in the area of monitoring and incident response

• Creating dashboards and reports supporting regulatory requirements and internal governance

• Participation in defining a catalog of good practices and architectural patterns for cloud security

• Verification of compliance with security requirements before launching production environments

• Analysis of exemption requests in the area of cloud security policies

• Continuous improvement of Cloud Security Engineering processes and tools

Requirements

• Experience in a technical role related to cloud security

• Practical knowledge of architecture and operations in AWS, Azure or GCP environments

• Experience working with CSPM/CNAPP class tools (e.g. Wiz)

• Knowledge of CI/CD and infrastructure automation (Terraform, Ansible, Jenkins)

• Scripting skills (Python, Bash, PowerShell)

• Experience working with version control systems (Git)

• Knowledge of security standards and regulations (e.g. NIST, PCI-DSS, GDPR, FedRAMP)

• Understanding of threats associated with containers, distributed systems and web applications

Nice to have

• Cloud security certifications (e.g. AWS Security Specialty, Azure/GCP certifications)

• Knowledge of Cloud Security Alliance Cloud Controls Matrix (CSA CCM)

We offer

• Work on global cybersecurity projects with high business impact.

• Cooperation with experienced, international teams of experts.

• Modern technology stack and a mature engineering environment.

• Flexible hybrid work model (6 days a month working from the office: Warsaw or Krakow).

• B2B contract (hourly rate) + Luxmed + MyBenefit.