Senior Security Engineer – Cloud, AppSec

airSlate

. Secure airSlate's AWS and GCP environments, including IAM, least privilege, workload identities, network segmentation, encryption, and key and secrets management .

Posted 10/12/2026full-timeRemote • PolandSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing AWS and GCP environments, implementing security best practices, and conducting thorough security testing across applications. Proficient in incident response and compliance audit preparation, with strong communication skills to convey security risks effectively.

Highest-signal resume keywords

AWS SecurityGCP SecuritySAST, DAST, and SCA ToolsIncident ResponseCompliance Audits (SOC 2, CASA)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityApplication SecuritySecurity TestingSecure Development PracticesBashPythonGoTerraform

Soft Skills

Clear CommunicationCollaboration

Tools & Technologies

CI/CD PipelinesSecurity Logging and MonitoringCDN Configuration

Industry Keywords

Threat ModelingRisk AssessmentsSecurity IncidentsPost-MortemsCompliance Standards (PCI DSS, NIST CSF)

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformPythonSDLCTerraformGo

About the role

Key responsibilities & impact

Secure airSlate's AWS and GCP environments, including IAM, least privilege, workload identities, network segmentation, encryption, and key and secrets management
Find and fix cloud misconfigurations and security risks
Set up security logging and monitoring and investigate suspicious activity
Test the security of web, mobile, and network-based applications
Run and improve SAST, DAST, and SCA security scanning tools and integrate them into CI/CD pipelines
Participate in architecture reviews, threat modeling sessions, and risk assessments
Explain security findings and work with engineers until issues are fixed
Investigate, triage, contain, and document security incidents through post-mortems
Prepare for SOC 2 and CASA audits and external assessments with product and compliance teams
Configure and monitor the CDN
Collaborate with the five-person Security Engineering team

Requirements

What you’ll need

4+ years of professional experience in information security, application security, or a related field
Hands-on experience securing AWS and/or GCP
Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD
Experience in security testing of web, mobile, or network applications
Experience in incident response, from investigation to post-mortem
Good knowledge of secure development practices across the SDLC, including threat modeling
Working knowledge of Bash, Python, Go, or Terraform
Clear communication skills and the ability to explain risks so that teams act on them
English at B2 level or higher, written and spoken
Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF
Previous experience as a DevOps engineer or developer

Benefits

Comp & perks

Flexible working environment with remote and hybrid working options
Ability to work from offices in the United States, Poland, Romania or Ukraine, or remotely from many countries
Performance-based bonus system
Stock options
Courses, conferences, and access to learning resources
Career growth and internal mobility opportunities
Comprehensive country-specific health coverage
Wellness programmes and access to fitness options
Quarterly company-wide Mental Health Days
Flexibility for parents
airSlate Junior Club for kids
Company-wide family days
Pet-friendly approach
Charitable initiatives through the airSlate Care programme
Matching employee donations
Open communication and company-wide Q&A sessions with the CEO