Responsibilities
- Design, implement, and improve infrastructure security controls including hardening, network segmentation, IAM, and endpoint security.
- Lead the technical direction for cyber defense, enterprise posture management, threat detection, and vulnerability management.
- Partner with ITOps, SysOps, DevOps, and XOps to integrate security into architecture and change management.
- Develop and maintain the SIEM strategy and supporting infrastructure for proactive visibility.
- Educate and coach engineering teams on secure system design.
- Lead people without direct management responsibility as part of a 14-member AppSec and Compliance team.
Requirements
- Extensive experience with GCP permissions and security configurations across Kubernetes, Azure, and on-premises environments.
- High proficiency in intrusion detection, exploit development, Linux operations, and security.
- Ability to assess cloud design gaps and recommend improvements for authentication, authorization, and bastion host configurations.
- Ability to communicate complex security risks to technical and non-technical stakeholders.
- Proven ability to manage large projects with complex deliverables and anticipate potential roadblocks.
- Industry-recognized certifications such as CISSP, Google Security Engineer, or GIAC are valued.
- Deep hands-on experience with open-source SIEM solutions, Google Security Operations, or Google Security Command Center is valued.
Benefits
- Hybrid work model; 2–3 days in the office each week near Prague, Nicosia, Bangalore, and Rennes office hubs, with remote work in the US, Costa Rica, Japan, Australia, Ireland, and Estonia.
- Five weeks of paid vacation.
- Sick leave compensation, including five paid uncertified sick days and paid medically certified leave.
- Fully paid parental leave of 18 weeks for maternity and 4 weeks for paternity.
- Two volunteer days.
- Meal vouchers of CZK 220 per working day.
- Annual Prague Travel Card (Lítačka).
- Flexible benefit budget, including options such as a MultiSport card, Canadian Medical membership, and pension savings contributions.
Categories
About Wrike
Wrike is the trusted work delivery platform for people and AI. Most organizations are already using AI to handle real work. Without the right infrastructure, it's ungoverned, unauditable, and out of control. That's the problem we solve. Wrike gives enterprises the governed, context-rich foundation they need to put people and AI to work together on their most consequential workflows — without losing control of how work gets done. What makes Wrike different is what sits behind the AI. Our Work Intelligence® Graph is built on 500B+ historical data points and two decades of enterprise work management. It gives AI the structured context to act reliably, inside the same roles, permissions, and access controls your people already work within. The result? Organizations don't just manage work. They deliver without doubt. Governance sets the boundaries. Autonomy follows when people trust the system. Scale is what happens when you stop hitting the ceiling that limits delivery. More than 20,000 organizations worldwide, including Siemens, Walmart, NVIDIA, and The Estée Lauder Companies, trust Wrike to deliver their most important work. 🔒 Enterprise-grade security: ISO 27001, SOC 2 & 3, GDPR compliant, 99.9% uptime SLA 🏆 Named a winner of the 2026 Artificial Intelligence Excellence Awards 🤖 Wrike AI Certification: organizational readiness for governed AI at enterprise scale