Top Cybersecurity Jobs in Krakow

Lead cybersecurity architecture and secure development lifecycle activities for aerospace products. Responsibilities include security requirements, threat modeling, code reviews, cyber risk assessments, certification documentation, security testing, regulatory compliance, assurance metrics, and coaching team members. The role collaborates with engineering, product safety, and enterprise security teams to deliver secure-by-default systems aligned with aerospace and global cybersecurity standards.

Design and build production-grade agentic AI workflows and enterprise products. Develop reusable orchestration, tool-use, context, memory, and multi-agent patterns; integrate agents across software development and operational workflows; and establish standards for evaluation, observability, security, reliability, and governance. Prototype and productionize AI capabilities, improve engineering productivity, mentor engineers, and collaborate with product and engineering leaders to deliver scalable, secure, user-focused solutions.

Conduct cybersecurity threat and risk assessments across infrastructure, cloud environments, applications, platforms, and business services. Evaluate security controls, identify vulnerabilities and control gaps, document risk scenarios, and recommend remediation. Collaborate with security, architecture, engineering, risk, and business stakeholders to embed security assessments into technology delivery. Produce risk reports supporting governance, risk acceptance, remediation planning, and informed decision-making.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Design and build LLM-based autonomous security agents and self-healing remediation pipelines. Integrate AI-driven threat detection into CI/CD and GitOps workflows, automate vulnerability research, patching, and security orchestration across cloud-native infrastructure.

Monitor and analyze security events, lead incident response and insider threat investigations, conduct digital forensics, communicate findings to technical and executive stakeholders, and build investigation tools, integrations, runbooks, and automated workflows. The role also mentors security engineers, supports cloud security initiatives, and participates in an EMEA-aligned on-call rotation.

Assess and manage cybersecurity risks across AI systems, models, data pipelines, and supporting environments. Conduct AI security assessments, architecture reviews, threat modeling, and risk assessments; define lifecycle controls, standards, and guardrails; and support governance, monitoring, incident response, and remediation. The consultant will advise financial services clients on secure AI adoption while collaborating with security, data, engineering, architecture, risk, and business stakeholders. The role requires a one-year relocation to Qatar.

Conduct cybersecurity threat and technology risk assessments across infrastructure, cloud environments, applications, platforms, and business services. Evaluate security controls, identify vulnerabilities and gaps, model risks, and recommend remediation. Collaborate with security, architecture, engineering, risk, and business stakeholders to embed security assessments into technology delivery. Produce clear reports supporting governance, remediation planning, risk acceptance, and informed decision-making for financial services clients.

Leads a global MDR security operations team responsible for monitoring, triaging, investigating, and escalating data security incidents. Oversees technical escalations, customer communications, documentation, SLA delivery, analyst recruitment, onboarding, training, performance reviews, and operational improvement. Supports development and maintenance of detection systems, playbooks, runbooks, and MDR processes while collaborating with customers and internal teams.

Provides technical advisory, architecture, and implementation guidance for AI security and multi-cloud environments. Defines security architectures and standards for agents, workloads, identities, runtime protection, and containment; assesses customer environments against security and regulatory requirements; evaluates frontier AI use cases; and advises customers, sales, presales, and services teams on emerging AI security risks and technologies.

Leads global information security governance, risk management, compliance, security transformation, and assurance across Corporate and Core IS Services. Partners with business and technology stakeholders to support risk-based decisions, implement security controls, meet regulatory obligations, and improve cybersecurity posture. Serves as the primary security and compliance representative, provides strategic guidance, and integrates security requirements across services, platforms, suppliers, and initiatives.

Develop and implement security measures and compliance controls; protect ABB from cybersecurity threats; advise on IS policies; support IS SRC implementation across IT assets; define access rights; engage stakeholders; monitor emerging IS technologies; assess efficiency improvements and feasibility.

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Own and mature the application security program, including scanning pipelines, vulnerability management, secure PR reviews, penetration testing, threat modeling, AI/ML security testing, and container security. Define program metrics, establish reporting baselines, and communicate security health to executives. Partner with developers, infrastructure, DevOps, and external testing vendors while independently prioritizing findings and driving remediation.

Leads EU SOC operations while performing hands-on Tier 2/Tier 3 security analysis, incident response, threat hunting, malware and attack investigation, and customer escalations. Coaches analysts, coordinates workload, monitors service metrics, improves operational processes, and supports onboarding. Requires significant SOC or MDR experience, strong Windows and networking knowledge, expertise in at least two security disciplines, fluent English, and fluent French or German. The position is Poland-based with rotating weekend schedules.

Provide Tier 3 escalation and advanced security analysis for MDR and MXDR customers. Investigate critical endpoint alerts, reconstruct attack chains across cloud, identity, email, network, and endpoint environments, respond to active breaches, conduct threat hunting, and research emerging threats, malware, actors, and TTPs. Develop hunting queries and threat alerts using OSINT, while communicating findings to SOC analysts, customers, and executives. The role requires fluent German or French and English and is based in Poland on a rotating schedule.

Provides senior-level 24/7 security operations monitoring and response for managed-service customers. Analyzes complex endpoint security events, investigates threats, tunes and baselines detection tools, improves security processes, and supports incident response. The role serves as a technical escalation point for analysts, DFIR teams, and clients; mentors team members; manages customer communications; and participates in rotating on-call coverage. German is strongly advantageous, while English fluency is required.

Conduct security audits of Atlassian Cloud environments, including Jira, Confluence, customer portals, Marketplace applications, APIs, and Rovo. Assess identity and access controls, vulnerabilities, data exposure, AI-related risks, and governance gaps. Produce evidence-based audit reports with prioritized risks and remediation recommendations, then develop remediation roadmaps aligned with Atlassian best practices and enterprise security standards.

Own end-to-end security for tokenized-asset infrastructure, including smart-contract audits, penetration testing, threat modeling, secure code review, custody and signing workflows, IAM, secrets management, detection, incident response, and remediation. Contribute TypeScript product engineering while partnering with engineering, security, CISO, compliance, auditors, and external assessors across blockchain and cloud environments.

Own and build cloud security for a fully cloud-native AWS environment. Responsibilities include securing IAM, networking, encryption, Kubernetes and ECS workloads, Terraform infrastructure, containers, secrets, and CI/CD pipelines. The role establishes security tooling, detection, automation, and policy-as-code; supports investigations; secures internal and product AI usage; and advises DevOps and R&D teams. The engineer will also support SOC 2 and financial-services compliance while serving as the technical cloud security authority.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Develop secure-enclave firmware for custom ASICs, including ROM code, bootloaders, secure boot, attestation, provisioning, OTA updates, recovery, telemetry, and secure debugging. Collaborate with ASIC, hardware, security, software, and systems teams throughout pre-silicon development, silicon bring-up, validation, and production deployment. Build reliable embedded software in C/C++ with testing, code review, and documentation.