# Senior Staff Security Engineer

[Veeamsoftware](https://gurify.com/jobs?q=Veeamsoftware) · Warsaw, Poland · Posted yesterday

Principal

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.eu.greenhouse.io/veeamsoftware/jobs/5020953101)

## Job description

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.

### About the Role

We're looking for a Senior Staff Platform Security Engineer to set and deliver the technical direction for platform and AI security at VDC. Veeam VDC Security Engineering builds and operates the security platform for a multi-cloud (Azure and AWS) SaaS serving regulated industries. This role sits in Platform and AI and partners with the other technical leads on the team across three areas that decide how much risk ships with every release: software supply chain, secure AI sandboxes, and vulnerability management. You'll partner with Product Engineering, SRE, Corporate Technology and Compliance, and you'll be measured on mechanisms delivered rather than advice given.

### What You’ll Do

- Partner with the other technical leads on the team to drive software supply chain security across Veeam SaaS platforms

- Engineer secure AI practices and patterns for Veeam SaaS platforms

- Partner with the other technical leads on the team to run vulnerability management as an engineering system

- Deliver security controls as Terraform

- Build the automation that reduces operational toil

- Raise the engineering bar across the team

- Participate in an on-call rotation

### Technologies You’ll Work With

- Terraform as the primary control plane for security infrastructure

- Azure: Entra ID and RBAC, Key Vault, Azure Policy, Defender for Cloud, Container Instances, AKS, Container Registry, managed identity and workload identity federation AND AWS equivalents

- CSPM for cloud and workload posture, attack paths and container findings

- ASPM for SAST, SCA, secrets and IaC scanning in the pipeline

- GitHub Actions, GitHub Apps and Azure DevOps for CI/CD

- Supply chain provenance tooling: SBOM (CycloneDX or SPDX), artifact signing and attestation (Sigstore / cosign), SLSA-aligned build integrity

- Anthropic Claude and Azure OpenAI

- Python and Go for the tooling stack, with comfort reading PowerShell and TypeScript

- Microsoft Sentinel and Log Analytics for the audit trail

### What You’ll Bring

- 8+ years across security and engineering, with recent depth in cloud platform security and hands-on delivery

- Production Terraform at scale. Modules other teams consume, not one-off stacks, and the judgment to know when a control belongs in code rather than a runbook

- AI and LLM security specifically: prompt injection, indirect prompt attack surfaces, agent tool-boundary abuse, model exfiltration

- Deep Azure: Entra ID and RBAC, Key Vault and key handling, network egress, workload and managed identity, policy enforcement, and a clear view of where the platform defaults leave you exposed

- Software supply chain security in practice: dependency risk, build pipeline integrity, provenance and signing, and the judgment to know which controls are worth the developer friction they cost

- Owned vulnerability management as an engineer, not a coordinator: ingestion, deduplication, routing, SLA design, and measurable reduction rather than a dashboard

- Designed isolation boundaries for untrusted code execution, covering network, identity and data, with a threat model you can defend

- Tooling ability in Python or Go sufficient to build and maintain systems rather than only configure vendor products

- A track record of setting technical direction others followed, and of shipping production code you can point to. This is a hands-on building role, not an advisory one

- Familiarity with regulated-industry expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors actually accept as evidence

### Bonus Skills

- Hands-on experience with agentic development environments (Claude Code, Cursor, GitHub Copilot Enterprise) and their operational security implications

- CSPM and ASPM tooling at production scale, including tuning signal into an owned and closing queue

- Kubernetes and container security (AKS, EKS): runtime detection, admission control, image policy

- Sigstore, SLSA, in-toto or equivalent provenance frameworks

- AWS depth alongside Azure

- Contributions to open-source security, supply chain or LLM safety tooling

- Relevant certifications (Azure or AWS security specialty, GIAC, or similar)

### What You’ll Get

- 26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares

- Paid parental, maternity, and paternity leave

- Fully covered family medical plan, dental, rehab, and vaccinations

- Life, critical illness, and disability insurance

- Employer pension contribution via PPK

- Monthly Edenred allowance of 450 PLN for meals

- MultiSport card fully covered by Veeam, giving access to sports facilities nationwide

- Up to 12 free therapy sessions annually, plus legal and financial advice

- Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.

Personal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.

By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.

**Live in Veeamsoftware’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- TA [Security Engineer](https://gurify.com/job/security-engineer-at-tango-1d4a9aefb521) Tango · Warszawa, Poland · 3 weeks ago
- VE [Technical Program Manager, Application Security](https://gurify.com/job/technical-program-manager-application-security-at-veeamsoftware-4c29e3fa490c) Veeamsoftware · Warsaw, Poland · 5 weeks ago
- FI [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-firstconnectinsurance-7f5685f7b636) Firstconnectinsurance · Poland · 5 weeks ago
- NE [Cloud Security Engineer (NXJ-208)](https://gurify.com/job/cloud-security-engineer-nxj-208-at-newxel-0086adb47b3e) Newxel · Warsaw · 4 weeks ago
- TA [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-tango-f1269c61ab1e) Tango · Warszawa, Poland · 7 weeks ago
- AW [Application Security Engineer (f/m/d)](https://gurify.com/job/application-security-engineer-f-m-d-at-awin-fb24719a88c0) Awin · Berlin, Poland · 7 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Staff Security Engineer","description":"\u003Cp\u003EVeeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world\u2019s biggest brands.\u003C/p\u003E\u003Ch3\u003EAbout the Role\u003C/h3\u003E\u003Cp\u003EWe\u0026#39;re looking for a Senior Staff Platform Security Engineer to set and deliver the technical direction for platform and AI security at VDC. Veeam VDC Security Engineering builds and operates the security platform for a multi-cloud (Azure and AWS) SaaS serving regulated industries. This role sits in Platform and AI and partners with the other technical leads on the team across three areas that decide how much risk ships with every release: software supply chain, secure AI sandboxes, and vulnerability management. You\u0026#39;ll partner with Product Engineering, SRE, Corporate Technology and Compliance, and you\u0026#39;ll be measured on mechanisms delivered rather than advice given.\u003C/p\u003E\u003Ch3\u003EWhat You\u2019ll Do\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EPartner with the other technical leads on the team to drive software supply chain security across Veeam SaaS platforms\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEngineer secure AI practices and patterns for Veeam SaaS platforms\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with the other technical leads on the team to run vulnerability management as an engineering system\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeliver security controls as Terraform\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild the automation that reduces operational toil\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERaise the engineering bar across the team\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EParticipate in an on-call rotation\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ETechnologies You\u2019ll Work With\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ETerraform as the primary control plane for security infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAzure: Entra ID and RBAC, Key Vault, Azure Policy, Defender for Cloud, Container Instances, AKS, Container Registry, managed identity and workload identity federation AND AWS equivalents\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECSPM for cloud and workload posture, attack paths and container findings\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EASPM for SAST, SCA, secrets and IaC scanning in the pipeline\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGitHub Actions, GitHub Apps and Azure DevOps for CI/CD\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupply chain provenance tooling: SBOM (CycloneDX or SPDX), artifact signing and attestation (Sigstore / cosign), SLSA-aligned build integrity\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAnthropic Claude and Azure OpenAI\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPython and Go for the tooling stack, with comfort reading PowerShell and TypeScript\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMicrosoft Sentinel and Log Analytics for the audit trail\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat You\u2019ll Bring\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E8\u002B years across security and engineering, with recent depth in cloud platform security and hands-on delivery\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProduction Terraform at scale. Modules other teams consume, not one-off stacks, and the judgment to know when a control belongs in code rather than a runbook\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAI and LLM security specifically: prompt injection, indirect prompt attack surfaces, agent tool-boundary abuse, model exfiltration\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeep Azure: Entra ID and RBAC, Key Vault and key handling, network egress, workload and managed identity, policy enforcement, and a clear view of where the platform defaults leave you exposed\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESoftware supply chain security in practice: dependency risk, build pipeline integrity, provenance and signing, and the judgment to know which controls are worth the developer friction they cost\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwned vulnerability management as an engineer, not a coordinator: ingestion, deduplication, routing, SLA design, and measurable reduction rather than a dashboard\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDesigned isolation boundaries for untrusted code execution, covering network, identity and data, with a threat model you can defend\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETooling ability in Python or Go sufficient to build and maintain systems rather than only configure vendor products\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA track record of setting technical direction others followed, and of shipping production code you can point to. This is a hands-on building role, not an advisory one\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with regulated-industry expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors actually accept as evidence\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EBonus Skills\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience with agentic development environments (Claude Code, Cursor, GitHub Copilot Enterprise) and their operational security implications\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECSPM and ASPM tooling at production scale, including tuning signal into an owned and closing queue\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EKubernetes and container security (AKS, EKS): runtime detection, admission control, image policy\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESigstore, SLSA, in-toto or equivalent provenance frameworks\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAWS depth alongside Azure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EContributions to open-source security, supply chain or LLM safety tooling\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERelevant certifications (Azure or AWS security specialty, GIAC, or similar)\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat You\u2019ll Get\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPaid parental, maternity, and paternity leave\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFully covered family medical plan, dental, rehab, and vaccinations\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELife, critical illness, and disability insurance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEmployer pension contribution via PPK\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonthly Edenred allowance of 450 PLN for meals\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMultiSport card fully covered by Veeam, giving access to sports facilities nationwide\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EUp to 12 free therapy sessions annually, plus legal and financial advice\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOpportunities to learn and grow through on-demand libraries (LinkedIn Learning, O\u2019Reilly), mentoring, workshops and learning events like our annual Global Day of Learning\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EVeeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.\u003C/p\u003E\u003Cp\u003EPersonal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.\u003C/p\u003E\u003Cp\u003EBy submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-staff-security-engineer-at-veeamsoftware-4d61d7383812"},"url":"https://gurify.com/job/senior-staff-security-engineer-at-veeamsoftware-4d61d7383812","datePosted":"2026-10-29","validThrough":"2026-12-14T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Veeamsoftware","sameAs":"https://job-boards.eu.greenhouse.io/veeamsoftware"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"PL","addressLocality":"Warsaw"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Poland","item":"https://gurify.com/jobs/poland"},{"@type":"ListItem","position":3,"name":"Senior Staff Security Engineer","item":"https://gurify.com/job/senior-staff-security-engineer-at-veeamsoftware-4d61d7383812"}]}
```