You will be running and maintaining the platform together with the team, working with Azure, AKS, deployments, upgrades, incident response, and on-call support;

You will be building and operating infrastructure required for the migration from a monolithic architecture to services, including environments, CI/CD pipelines in Azure DevOps, Infrastructure as Code, monitoring, and alerting;

You will be managing the external attack surface, maintaining an inventory of internet-facing assets, monitoring potential exposures, and ensuring vulnerabilities are addressed effectively;

You will be integrating security into Azure DevOps and Kubernetes delivery pipelines, including code, dependency, secrets, container, and Infrastructure as Code scanning;

You will be establishing and maintaining the Azure and Microsoft 365 security baseline, including identity and access management, MFA, cloud security posture, Microsoft Defender, and access management processes;

You will be managing the vulnerability management process end-to-end, from identifying vulnerabilities and coordinating fixes to verifying their resolution and maintaining appropriate evidence;

You will be responsible for the technical security controls supporting the ISO 27001 certification programme, working closely with the compliance lead;

You will be providing technical input for customer security questionnaires and audits and participating in discussions with customers and auditors when deeper technical expertise is required;

You will be supporting penetration testing activities performed by an external partner, including defining the scope, coordinating testing activities, and ensuring identified findings are properly addressed;

You will be automating operational and security processes wherever possible and continuously improving the reliability and security of the platform.

You have 5+ years of professional experience in Platform Engineering, DevOps, or a similar role;

You have strong hands-on experience with Microsoft Azure and Kubernetes/AKS in production environments, including building clusters, pipelines, and environments, performing upgrades, and supporting production systems;

You have hands-on experience in security engineering and have taken ownership of security-related processes rather than only supporting them;

You have experience with the technical side of ISO 27001 or an equivalent security framework, or you have managed vulnerability management processes end-to-end;

You have practical knowledge of security tooling and practices, including external attack surface monitoring, DAST, SAST, SCA, secrets scanning, container scanning, and cloud security posture management;

You have experience with Azure DevOps and CI/CD pipelines;

You have experience with Infrastructure as Code and infrastructure automation;

You have scripting and automation skills using Bash, PowerShell, or Python;

You are comfortable documenting technical processes and security controls and communicating technical topics clearly to customers, security teams, and auditors;

You are able to independently prioritize tasks and take ownership in a small, senior team environment;

You are fluent in English.

Knowledge of Estonian or German;

Previous experience working with enterprise or banking customers and supporting customer security audits;

Experience supporting organizations through security certification programmes;

Experience working on modernization projects involving migration from monolithic architectures to services.

Salary: 25 000 - 33 000 PLN netto / B2B;

Private healthcare, Multisport card and trainings.

You will be running and maintaining the platform together with the team, working with Azure, AKS, deployments, upgrades, incident response, and on-call support;

You will be building and operating infrastructure required for the migration from a monolithic architecture to services, including environments, CI/CD pipelines in Azure DevOps, Infrastructure as Code, monitoring, and alerting;

You will be managing the external attack surface, maintaining an inventory of internet-facing assets, monitoring potential exposures, and ensuring vulnerabilities are addressed effectively;

You will be integrating security into Azure DevOps and Kubernetes delivery pipelines, including code, dependency, secrets, container, and Infrastructure as Code scanning;

You will be establishing and maintaining the Azure and Microsoft 365 security baseline, including identity and access management, MFA, cloud security posture, Microsoft Defender, and access management processes;

You will be managing the vulnerability management process end-to-end, from identifying vulnerabilities and coordinating fixes to verifying their resolution and maintaining appropriate evidence;

You will be responsible for the technical security controls supporting the ISO 27001 certification programme, working closely with the compliance lead;

You will be providing technical input for customer security questionnaires and audits and participating in discussions with customers and auditors when deeper technical expertise is required;

You will be supporting penetration testing activities performed by an external partner, including defining the scope, coordinating testing activities, and ensuring identified findings are properly addressed;

You will be automating operational and security processes wherever possible and continuously improving the reliability and security of the platform.

You have 5+ years of professional experience in Platform Engineering, DevOps, or a similar role;

You have strong hands-on experience with Microsoft Azure and Kubernetes/AKS in production environments, including building clusters, pipelines, and environments, performing upgrades, and supporting production systems;

You have hands-on experience in security engineering and have taken ownership of security-related processes rather than only supporting them;

You have experience with the technical side of ISO 27001 or an equivalent security framework, or you have managed vulnerability management processes end-to-end;

You have practical knowledge of security tooling and practices, including external attack surface monitoring, DAST, SAST, SCA, secrets scanning, container scanning, and cloud security posture management;

You have experience with Azure DevOps and CI/CD pipelines;

You have experience with Infrastructure as Code and infrastructure automation;

You have scripting and automation skills using Bash, PowerShell, or Python;

You are comfortable documenting technical processes and security controls and communicating technical topics clearly to customers, security teams, and auditors;

You are able to independently prioritize tasks and take ownership in a small, senior team environment;

You are fluent in English.

Knowledge of Estonian or German;

Previous experience working with enterprise or banking customers and supporting customer security audits;

Experience supporting organizations through security certification programmes;

Experience working on modernization projects involving migration from monolithic architectures to services.

Salary: 25 000 - 33 000 PLN netto / B2B;

Private healthcare, Multisport card and trainings.