APPLYDJINN
Vacancy catalog
SoftServe
Open role>14 days

Cloud Security Engineer

SoftServePoland
Work model
Hybrid
Experience
5+ years
Employment
Full Time
Compensation
Not disclosed
Technology signal
8 tags

Technology context

8

Parsed from the vacancy text; ordered by relevance to this role.

AI AgentsAIAWSGCPCloudCloud SecurityTerraformAutomation

Full listing

Role description

About the role

In this role, you will work as a hands-on engineer embedded in the client's cloud security team, operating at the intersection of cloud engineering, security operations, and risk management. You will primarily work with multi-account AWS and GCP environments, operating the client's CNAPP platform and ensuring it delivers full coverage and reliable visibility across accounts, workloads, and identities. A significant part of the role is building the triage process and driving remediation with engineering teams - not just reporting findings - while over time helping strengthen the overall cloud security posture as the program matures and new capabilities are adopted.

Responsibilities

  • Own, configure, and maintain Upwind across AWS and GCP environments, working with cloud engineering teams to ensure full coverage and visibility
  • Run day-to-day cloud vulnerability management within the defined program, applying agreed processes and SLAs, and deliver regular reporting
  • Prioritise findings based on real business risk and context, such as exposure, data sensitivity, and exploitability, rather than severity scores alone
  • Drive remediation with engineering teams through clear, actionable tickets and consistent follow-up
  • Improve the overall cloud security posture in line with industry frameworks and best practices

Requirements

  • 5+ years in cloud security or security engineering, with hands-on experience in both AWS and GCP
  • Experience with Upwind or a comparable CNAPP/CSPM platform (Wiz.io, Prisma Cloud, Orca)
  • Strong understanding of risk-based prioritisation and security posture management
  • Knowledge of identity and access management, including AWS IAM, GCP IAM, and Microsoft Entra ID
  • Basic understanding of agentic AI architectures and tool use
  • Familiarity with cloud security frameworks and benchmarks such as NIST SP 800-53 and CIS AWS and GCP Foundations Benchmarks
  • Experience with Terraform and scripting for automation
  • Strong communication skills and the ability to work autonomously, fluent English