Flexible work model
Work from home, from the office, or in a hybrid format that supports focus and collaboration.
About the role
In this role, you will work as a hands-on engineer embedded in the client’s cloud security team, operating at the intersection of cloud engineering, security operations, and risk management. You will primarily work with multi-account AWS and GCP environments, operating the client’s CNAPP platform and ensuring it delivers full coverage and reliable visibility across accounts, workloads, and identities. A significant part of the role is building the triage process and driving remediation with engineering teams — not just reporting findings — while over time helping strengthen the overall cloud security posture as the program matures and new capabilities are adopted.
Responsibilities
- Own, configure, and maintain Upwind across AWS and GCP environments, working with cloud engineering teams to ensure full coverage and visibility
- Run day-to-day cloud vulnerability management within the defined program, applying agreed processes and SLAs, and deliver regular reporting
- Prioritise findings based on real business risk and context, such as exposure, data sensitivity, and exploitability, rather than severity scores alone
- Drive remediation with engineering teams through clear, actionable tickets and consistent follow-up
- Improve the overall cloud security posture in line with industry frameworks and best practices
Requirements
- 5+ years in cloud security or security engineering, with hands-on experience in both AWS and GCP
- Experience with Upwind or a comparable CNAPP/CSPM platform (Wiz.io, Prisma Cloud, Orca)
- Strong understanding of risk-based prioritisation and security posture management
- Knowledge of identity and access management, including AWS IAM, GCP IAM, and Microsoft Entra ID
- Basic understanding of agentic AI architectures and tool use
- Familiarity with cloud security frameworks and benchmarks such as NIST SP 800-53 and CIS AWS and GCP Foundations Benchmarks
- Experience with Terraform and scripting for automation
- Strong communication skills and the ability to work autonomously, fluent English
SoftServe is an equal opportunity employer. Qualified applicants will receive consideration regardless of race, color, ancestry, ethnicity, national origin, religion, sex, sexual orientation, gender identity or expression, age, citizenship, disability, health condition, marital or family status, veteran status, or any other characteristic protected by applicable law.
Role Summary
Location
Poland
Work type
Remote/Office
Direction
Engineering & Technology
Subdirection
Cybersecurity
Tech level
Senior
Apply Now
Fill out the form, and we'll be in touch shortly.
About us
We are a digital engineering and technology consulting company where expertise grows alongside people. For more than 30 years, we have been elevating technology: helping organizations navigate complex business challenges by combining deep engineering knowledge with thoughtful, research-backed innovation. Our teams work across key areas: digital engineering, data and analytics, Сloud, and AI/ML. In each, we deliver practical, scalable solutions rooted in real business needs and measurable human impact.
You bring your perspective and ambition. We create an environment where your work meets clarity, confidence, and purpose.
We offer
Compensation & Benefits
Competitive, market-based pay, benchmarked by role and location — plus health coverage, paid time off, wellness support, and learning opportunities.
People-first Leadership
Approachable leaders who communicate openly, keep teams close to the strategy, and support long-term planning.
Advanced tech communities
Stay close to AI/ML, Cloud, Quantum Computing, IoT, and Robotics communities, with projects built on modern frameworks.