Cloud Security Engineer

Newxel

. Own the end-to-end cloud security architecture and strategy across the company .

Posted 9/30/2026full-timePolandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security architecture and strategy, with a strong focus on multi-cloud environments including Azure, AWS, and GCP. Proficient in implementing security measures through automation, policy-as-code, and collaboration with cross-functional teams.

Highest-signal resume keywords

Cloud Security ArchitectureKubernetes SecurityTerraform and Infrastructure as CodeSAST, DAST, SCA IntegrationSOC2 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityMulti-Cloud EnvironmentsIAMNetwork SecuritySecrets ManagementPolicy-as-CodeRBACVulnerability ManagementPythonContainer Security

Soft Skills

Clear CommunicationCollaboration

Tools & Technologies

AzureAWSGCPTerraformOPASentinelAzure PolicyCI/CD PipelinesCNAPPSecurity Assessment Tools

Industry Keywords

Security EngineeringCloud-Native ControlsIncident ResponseAudit ReadinessAI Infrastructure

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonTerraform

About the role

Key responsibilities & impact

Own the end-to-end cloud security architecture and strategy across the company
Architect and enforce a unified multi-cloud security strategy across Azure, AWS, and GCP, covering IAM, network security, and secrets management
Embed automated policy-as-code guardrails in Terraform and CI/CD pipelines using OPA, Sentinel, and Azure Policy
Own Kubernetes (AKS) cluster security, including RBAC, network policies, pod security standards, and admission controls
Drive vulnerability and posture management through the CNAPP platform and manage findings to closure under strict SLAs
Integrate automated SAST, DAST, SCA, and secret scanning into CI/CD workflows
Lead cloud security incident response, conduct post-mortems, and implement preventive measures
Collaborate with DevOps, MLOps, and FinOps teams to embed security baselines into development workflows
Manage customer security assessments and technical questionnaires with Sales and Legal stakeholders

Requirements

What you’ll need

4+ years of hands-on experience in Cloud Security or Security Engineering within multi-cloud environments
Deep expertise in Azure security architecture and cloud-native controls
Strong practical knowledge of Kubernetes security, including RBAC, network policies, admission controllers, and image scanning
Hands-on proficiency with Terraform and Infrastructure as Code using policy-as-code principles
Proven background integrating SAST, DAST, SCA, and secret scanning into CI/CD pipelines alongside DevOps teams
Clear communication skills with experience partnering directly with engineering and management stakeholders
Familiarity with security requirements for LLM and AI infrastructure
Proficiency in Python for developing custom security tooling and automation
Working experience with SOC2 compliance frameworks and audit readiness
Prior experience serving as a security lead or hands-on technical lead
Exposure to modern container security practices including image signing, SBOMs, and runtime protection

Benefits

Comp & perks

Complete autonomy and ownership as the single security authority shaping the security roadmap
Broad multi-cloud exposure across Azure, AWS, and GCP
Exposure to modern Kubernetes, policy-as-code, and emerging LLM/AI infrastructure domains