DevSecOps (Kraków) @

REQUIREMENTS

Must-Have Requirements:

• 3+ years of experience in DevOps or DevSecOps roles.
• Experience in securing CI/CD pipelines
• Familiarity with DevSecOps tooling (e.g. SAST, DAST, SCA, IaC scanning).
• Bachelor's degree in Computer Science, Engineering, or related field.
• Hands-on experience with clouds and automation tools such as Terraform, Ansible, etc.
• Solid understanding of Linux System Security and system hardening.
• Intermediate English level or higher (written & spoken).

​​​​​Nice to have:

• Experience in implementing security controls and familiarity with SCAP or continuous security monitoring solutions.
• Knowledge of network security concepts.
• Understanding of data classification and data security principles.
• Exposure to cloud security, particularly AWS.
• Ability to analyze and resolve complex infrastructure and application deployment issues.

POSITION SUMMARY

As Security Engineer on the Infrastructure Team at LotusFlare you will be responsible to drive the overall IT security standards across our cloud native Digital Network Operator stack. This incorporates security policies and domain security concepts along with the implementation and the lifecycle of security technologies in LotusFlare's infrastructure.

As Senior Security Engineer you will be reporting to the VP of Infrastructure and engage directly with infrastructure and product engineering teams.

Our office is located in the vibrant area of Krakow, at Aleja Pokoju 18. We encourage you to join us in the office to collaborate, connect, and contribute to our team's success.

WE OFFER

• Hybrid work environment; 
• Yearly bonus; 
• Paid lunches; 
• Private medical insurance; 
• The company covers accountant assistance expenses; 
• ZUS coverage; 
• Paid sick leaves; 
• 21 working days of vacation, public holidays; 
• Training and workshops. 

,[Actively managing the security of our cloud-native runtime environment, Clearly and promptly communicate and negotiate security technical topics with both technical and non-technical audiences, Drive security improvements to production cloud environments, Perform targeted offensive security testing, Implement continuous monitoring systems and tools to automatically identify potential security issues at the code, application and infrastructure layers, Review code and other production changes with the goal to maintain the security standards, Stay current on emerging security threats, vulnerabilities, and controls for the cloud, Working with backend engineering teams on architecting, profiling, and monitoring high-performance high availability product components as microservices, providing mission-critical real-time functionality on the control plane of mobile and fixed networks, Evolving the infrastructure and keeping our stack up to date with the latest technologies ] Requirements: DevOps, CD pipelines, SAST, DAST, IaC, Degree, Terraform, Ansible, Linux, Security, Network Security, Cloud security, AWS Tools: . Additionally: Private healthcare, Annual bonus, Sick days, Training budget, Lunch card, Yearly bonus, Assistance expenses, Unlimited sick leaves, Public holidays, Private Medical Insurance, ZUS Coverage, 21 working days of vacation, Trainings and workshops, Free coffee, Canteen, Free snacks, Free lunch, Modern office, Startup atmosphere.

---