Job details:

• Role: Senior Cloud Security Engineer 
• Full-time
• Remote
• Start: ASAP
• End: 30/06/2027

Scope:

• Operate Microsoft Defender for Cloud across all Azure subscriptions — monitor secure score, alerts, recommendations, and Defender plans
• Apply and improve compliance against CIS Azure Benchmark and Microsoft Cloud Security Benchmark (MCSB)
• Triage security recommendations and drive remediation with application, platform, and infrastructure teams
• Own end-to-end resolution of security audit findings — including tracking, evidence collection, and closure • Manage security exceptions and risk acceptance with proper documentation and time-bound reviews
• Define and enforce Azure Policy, RBAC, and guardrails to prevent misconfigurations
• Review and harden Azure identity (Entra ID), networking, Key Vault, storage, compute, and container security
• Provide security oversight across AWS, GCP, Oracle Cloud, and IBM Cloud — onboarding them into Defender for Cloud CSPM where possible • Manage vulnerability findings and drive timely remediation across cloud workloads y
• Partner with the platform team to embed security guardrails into IaC and CI/CD pipelines
• Report on security posture, remediation progress, and compliance status to leadership and audit teams

Skills:

• 7+ years of hands-on cloud security experience with strong depth in Azure
• Deep operational experience with Microsoft Defender for Cloud (all Defender plans and CSPM)
• Working knowledge of CIS and MCSB frameworks • Hands-on with Azure Policy, Entra ID, RBAC, Key Vault, and network security controls • Experience resolving security audit findings and working with internal/external auditors
• Working security knowledge of at least one additional cloud (AWS, GCP, OCI, or IBM)
• Experience with Microsoft Sentinel or Defender XDR, including KQL • Strong communication skills to work with engineering teams and leadership Nice to Have • Certifications such as SC-100, AZ-500, CISSP, or CCSP
• Multi-cloud security experience across two or more of AWS, GCP, OCI, IBM • Policy-as-code experience (OPA, Checkov, tfsec) • Familiarity with SOC 2, ISO 27001, NIST 800-53, PCI DSS
• Scripting with PowerShell or Python

SNI sp. z o.o. will process personal data for the purpose of the recruitment process in accordance with Data Privacy Policy. The data may also be stored and processed for future recruitment purposes, in accordance with the given consent.