1 month ago
Poland (city not specified)Senior
Responsibilities
- Secure AWS and GCP environments, including IAM, least privilege, workload identities, network segmentation, encryption, and key and secrets management.
- Identify and remediate cloud misconfigurations and security risks.
- Configure security logging and monitoring and investigate suspicious activity.
- Test web, mobile, and network-based applications for security issues.
- Select, configure, improve, and integrate SAST, DAST, and SCA tools into development pipelines.
- Participate in architecture reviews, threat modeling, and risk assessments.
- Communicate security findings and work with engineering teams through remediation.
- Investigate, triage, contain, and document application, infrastructure, and user-related security incidents.
- Support SOC 2, CASA, and external security assessments.
- Configure and monitor the CDN.
Requirements
- 4+ years of professional experience in information security, application security, or a related field.
- Hands-on experience securing AWS and/or GCP environments.
- Practical experience selecting, configuring, and integrating SAST, DAST, and SCA tools.
- Experience testing the security of web, mobile, or network applications.
- Experience handling incident response from investigation through post-mortem.
- Knowledge of secure development practices across the SDLC, including threat modeling.
- Working knowledge of Bash, Python, Go, or Terraform.
- Clear communication skills and the ability to explain security risks effectively.
- English proficiency at B2 level or higher, written and spoken.
- Experience with SOC 2, CASA, PCI DSS, or NIST CSF audits is helpful.
- Previous DevOps or software development experience is helpful.
Benefits
- Flexible remote and hybrid working options, with office locations in the United States, Poland, Romania, and Ukraine.
- Competitive local-market compensation, performance-based bonuses, and stock options.
- Courses, conferences, learning resources, career growth, and internal mobility support.
- Country-specific health coverage, wellness and fitness options, and quarterly company-wide Mental Health Days.
- Family-friendly flexibility, family days, a junior club, and a pet-friendly approach.
- Charitable support through the airSlate Care programme and employee donation matching.
About airSlate
airSlate is a privately held SaaS company that builds no-code workflow automation, e-signature, and document management products for businesses of all sizes. Its portfolio includes pdfFiller, signNow, DocHub, airSlate Workflow, US Legal Forms, and Instapage, offered primarily via subscriptions. Founded in 2006 and headquartered in Brookline, Massachusetts, the company serves global customers seeking to digitize document workflows, create landing pages, and manage PDFs without custom development.