Search Remote Jobs

Senior Cloud Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🌐 Ukraine, Poland – Remote

infoinfo

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Erbis's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of Erbis

Erbis

51 - 200 employees

💼 Consulting

📦 Logistics

☁️ SaaS

Consulting • Logistics • SaaS

Erbis is a technology company specializing in developing customized software solutions for various industries. The company offers services such as platform and product development, AI and machine learning, web development, mobile app development, and more. Erbis focuses on delivering high-quality and scalable applications, catering to businesses in sectors like supply chain, legal, and startups. Their expertise includes digital transformation, cybersecurity, and modernization of legacy systems. Erbis is committed to providing innovative tech solutions to optimize costs and improve operational efficiency for their clients.

📋 Description

• Own the security of an AWS supply chain and shipment management platform end to end • Design and maintain a multi-account AWS Organizations setup with organization-wide CloudTrail and log archive, delegated GuardDuty, Security Hub and Config, and service control policies • Implement threat detection and high-risk change alerting across all accounts and regions • Handle alert triage, security on-call and incident response • Route Security Hub, Inspector and SonarQube findings to tickets, conduct weekly reviews and agree patch plans with DevOps • Manage short-lived, role-based credentials for people and automation • Conduct privileged access reviews across IAM Identity Center and Keycloak and harden Keycloak • Create incident runbooks, conduct tabletop exercises and test backup restores, including ransomware scenarios • Implement DNS filtering, secrets management, encryption in transit and at rest, and maintain a minimal external attack surface • Manage quarterly external penetration tests, customer security questionnaires and audits, and AWS partner reviews • Review infrastructure and application changes for security and keep policies current • Build and tune AI-assisted security triage agents with humans approving every proposed action • Report to the CTO and work with DevOps and development teams to address findings

🎯 Requirements

• 6+ years in security or infrastructure engineering, with at least 3 years hands-on securing production AWS environments • Ability to work autonomously: set priorities, make decisions and see them through • Deep AWS security knowledge: IAM and Organizations (SCPs, Identity Center, cross-account roles), CloudTrail, GuardDuty, Security Hub, Config, Inspector, KMS, Secrets Manager, VPC and network controls • Ability to write and review production Terraform • Scripting in Python or Bash for automation and investigations • Experience leading real incidents from first alert through containment and post-mortem • Experience with SSO, MFA, least privilege and access reviews • Experience with Keycloak or another OIDC/SAML provider • Experience producing evidence for SOC 2, ISO 27001 or similar and answering enterprise customers' security questionnaires • Ability to explain risk plainly to engineers and executives • Ability to get fixes done through other teams without authority over them • Fluent written English

🏖️ Benefits

• Paid Vacation days: 24 working days • Paid Sick days: 15 working days • The opportunity to dedicate up to 10% of working hours for self-education and personal development • BYOD program (Bring Your Own Device)

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 Yesterday

Київстар

1001 - 5000

📡 Telecommunications

Security Engineer protecting Kyivstar.Tech’s cloud infrastructure and data. Designing cloud security architecture, vulnerability management, DLP, and privileged access controls.

🗣️🇺🇦 Ukrainian Required

🕒 September 16

Devoted Studios

51 - 200

🎮 Gaming

🤝 B2B

Infrastructure and Endpoint Security Engineer protecting Devoted Studios’ global game development operations. Securing networks, endpoints, cloud infrastructure, monitoring, incident response, and security awareness.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok