# Cloud Security Engineer (NXJ-208)

[Newxel](https://gurify.com/jobs?q=Newxel) · Warsaw · Posted 3 weeks ago

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://jobs.ashbyhq.com/newxel/465f8889-dbbc-4e57-8616-8cdfead74749)

## Job description

### THE ROLE

As the sole security engineer across the entire company, you will take full ownership of the end-to-end cloud security architecture and strategy. The core challenge is not gatekeeping, but designing policy-as-code guardrails and proactive security baselines that embed natively into automated pipelines. You will work directly with DevOps, MLOps, and engineering teams to maintain high software delivery velocity while securing scalable cloud and AI infrastructure.

### ABOUT THE PRODUCT

The platform transforms live sports broadcasts into personalized, publication-ready highlight packages while games are actively in progress. Operating at continuous scale, it automatically ingests, analyzes, and tags video streams to identify key moments. The system processes massive data volumes with zero tolerance for latency, directly powering downstream consumer-facing media products.

Technology Stack: The core cloud infrastructure relies on Azure (with AWS/GCP workloads), provisioned through Terraform and automated CI/CD pipelines. Workloads run on Kubernetes (AKS) with policy enforcement via OPA, Sentinel, and Azure Policy. Vulnerability management and runtime monitoring are driven through a CNAPP platform, while Python is utilized for automation and custom security integrations.

### WHAT YOU’LL BE DOING

- Architect and enforce the unified multi-cloud security strategy across Azure, AWS, and GCP covering IAM, network security, and secrets management

- Embed automated guardrails in Terraform and CI/CD pipelines using policy-as-code (OPA, Sentinel, Azure Policy) to block misconfigurations before deployment

- Own Kubernetes (AKS) cluster security, establishing RBAC, network policies, pod security standards, and admission control controls

- Drive end-to-end vulnerability and posture management through the CNAPP platform, managing findings to closure under strict SLAs

- Integrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows, partnering with engineering teams on remediation

- Lead cloud security incident response procedures, conducting post-mortems and implementing preventive preventive measures

- Collaborate with DevOps, MLOps, and FinOps teams to embed security baselines directly into development workflows without impacting delivery velocity

- Manage customer security assessments and technical questionnaires in coordination with Sales and Legal stakeholders

### WHAT WE EXPECT

### MUST-HAVE

- 4+ years of hands-on experience in Cloud Security or Security Engineering within multi-cloud environments

- Deep expertise in Azure security architecture and cloud-native controls

- Strong practical knowledge of Kubernetes security, including RBAC, network policies, admission controllers, and image scanning

- Hands-on proficiency with Terraform and Infrastructure as Code using policy-as-code principles

- Proven background integrating security controls (SAST/DAST/SCA/secret scanning) into CI/CD pipelines alongside DevOps teams

- Clear communication skills with experience partnering directly with engineering and management stakeholders

- Familiarity with security requirements for LLM and AI infrastructure

### NICE-TO-HAVE

- Proficiency in Python for developing custom security tooling and automation

- Working experience with SOC2 compliance frameworks and audit readiness

- Prior experience serving as a security lead or hands-on technical lead

- Exposure to modern container security practices including image signing, SBOMs, and runtime protection

### WHY THIS ROLE IS WORTH YOUR TIME

- You have complete autonomy and ownership as the single security authority shaping the security roadmap for a fast-growing AI platform

- You are building practical, developer-friendly guardrails rather than acting as a traditional gatekeeper, directly embedding security into high-velocity engineering workflows

- The role provides broad multi-cloud exposure across modern Kubernetes, policy-as-code, and emerging LLM/AI infrastructure domains

**Live in Newxel’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- FI [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-firstconnectinsurance-7f5685f7b636) Firstconnectinsurance · Poland · 4 weeks ago
- TA [Security Engineer](https://gurify.com/job/security-engineer-at-tango-1d4a9aefb521) Tango · Warszawa, Poland · 2 weeks ago
- TA [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-tango-f1269c61ab1e) Tango · Warszawa, Poland · 6 weeks ago
- CA [Senior Application Security Engineer - capital.com](https://gurify.com/job/senior-application-security-engineer-capital-com-36a92f664aa8) Capital · Warsaw, Poland · 3 weeks ago
- RT [Staff Security Engineer](https://gurify.com/job/staff-security-engineer-at-rtbhouse-f721f4b9c251) Rtbhouse · Warsaw, Poland · 7 weeks ago
- RT [Staff Security Engineer](https://gurify.com/job/staff-security-engineer-at-rtbhouse-14f338af67a4) Rtbhouse · Warsaw, Poland · 7 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Cloud Security Engineer (NXJ-208)","description":"\u003Ch3\u003ETHE ROLE\u003C/h3\u003E\u003Cp\u003EAs the sole security engineer across the entire company, you will take full ownership of the end-to-end cloud security architecture and strategy. The core challenge is not gatekeeping, but designing policy-as-code guardrails and proactive security baselines that embed natively into automated pipelines. You will work directly with DevOps, MLOps, and engineering teams to maintain high software delivery velocity while securing scalable cloud and AI infrastructure.\u003C/p\u003E\u003Ch3\u003EABOUT THE PRODUCT\u003C/h3\u003E\u003Cp\u003EThe platform transforms live sports broadcasts into personalized, publication-ready highlight packages while games are actively in progress. Operating at continuous scale, it automatically ingests, analyzes, and tags video streams to identify key moments. The system processes massive data volumes with zero tolerance for latency, directly powering downstream consumer-facing media products.\u003C/p\u003E\u003Cp\u003ETechnology Stack: The core cloud infrastructure relies on Azure (with AWS/GCP workloads), provisioned through Terraform and automated CI/CD pipelines. Workloads run on Kubernetes (AKS) with policy enforcement via OPA, Sentinel, and Azure Policy. Vulnerability management and runtime monitoring are driven through a CNAPP platform, while Python is utilized for automation and custom security integrations.\u003C/p\u003E\u003Ch3\u003EWHAT YOU\u2019LL BE DOING\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EArchitect and enforce the unified multi-cloud security strategy across Azure, AWS, and GCP covering IAM, network security, and secrets management\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEmbed automated guardrails in Terraform and CI/CD pipelines using policy-as-code (OPA, Sentinel, Azure Policy) to block misconfigurations before deployment\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwn Kubernetes (AKS) cluster security, establishing RBAC, network policies, pod security standards, and admission control controls\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDrive end-to-end vulnerability and posture management through the CNAPP platform, managing findings to closure under strict SLAs\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIntegrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows, partnering with engineering teams on remediation\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead cloud security incident response procedures, conducting post-mortems and implementing preventive preventive measures\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with DevOps, MLOps, and FinOps teams to embed security baselines directly into development workflows without impacting delivery velocity\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EManage customer security assessments and technical questionnaires in coordination with Sales and Legal stakeholders\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWHAT WE EXPECT\u003C/h3\u003E\u003Ch3\u003EMUST-HAVE\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E4\u002B years of hands-on experience in Cloud Security or Security Engineering within multi-cloud environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeep expertise in Azure security architecture and cloud-native controls\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong practical knowledge of Kubernetes security, including RBAC, network policies, admission controllers, and image scanning\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on proficiency with Terraform and Infrastructure as Code using policy-as-code principles\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProven background integrating security controls (SAST/DAST/SCA/secret scanning) into CI/CD pipelines alongside DevOps teams\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EClear communication skills with experience partnering directly with engineering and management stakeholders\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with security requirements for LLM and AI infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENICE-TO-HAVE\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EProficiency in Python for developing custom security tooling and automation\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking experience with SOC2 compliance frameworks and audit readiness\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPrior experience serving as a security lead or hands-on technical lead\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExposure to modern container security practices including image signing, SBOMs, and runtime protection\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWHY THIS ROLE IS WORTH YOUR TIME\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EYou have complete autonomy and ownership as the single security authority shaping the security roadmap for a fast-growing AI platform\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EYou are building practical, developer-friendly guardrails rather than acting as a traditional gatekeeper, directly embedding security into high-velocity engineering workflows\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EThe role provides broad multi-cloud exposure across modern Kubernetes, policy-as-code, and emerging LLM/AI infrastructure domains\u003C/li\u003E\u003C/ul\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"cloud-security-engineer-nxj-208-at-newxel-0086adb47b3e"},"url":"https://gurify.com/job/cloud-security-engineer-nxj-208-at-newxel-0086adb47b3e","datePosted":"2026-09-30","validThrough":"2026-12-07T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Newxel","sameAs":"https://jobs.ashbyhq.com/newxel"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"PL","addressLocality":"Warsaw"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Poland","item":"https://gurify.com/jobs/poland"},{"@type":"ListItem","position":3,"name":"Cloud Security Engineer (NXJ-208)","item":"https://gurify.com/job/cloud-security-engineer-nxj-208-at-newxel-0086adb47b3e"}]}
```