Top Cybersecurity Jobs in Krakow

Build, operate, and automate Menlo Security's global cloud-native platform across GCP and AWS. Manage VM fleets and Kubernetes clusters, author Terraform IaC and Spacelift workflows, implement observability with Grafana/Prometheus/OTel, handle networking, DNS, certificates, and service mesh, and reduce operational toil through automation while participating in 24x7 on-call rotation and cross-team architecture and DR planning.

Dragonfly is seeking Software Engineers for various portfolio companies, focusing on crypto technologies. Engineers of all experience levels are needed across multiple stacks.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Administer and improve EDR and SIEM platforms, tuning detection rules, correlation logic, endpoint policies, alerts, dashboards, and integrations. Maintain log collection, agent health, platform availability, and security visibility across endpoints, servers, cloud, and network systems. Support investigations, onboard new systems, convert security findings into monitoring improvements, track detection coverage, and produce documentation and runbooks.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Monitor and analyze security logs and events in real time, investigate incidents to determine root cause and remediation, maintain and improve security operations procedures, report security exposures or noncompliance, and assess/mitigate findings from penetration tests and vulnerability assessments. Shift includes weekend coverage.

Provide SAP BASIS administration and security support across S/4HANA, ECC and cloud/hybrid landscapes. Manage installations, upgrades, patching, transports, performance, availability, and authorizations. Troubleshoot issues, collaborate with functional and technical teams, and improve SAP operations, security standards, and governance in international projects.

Lead design and implementation of SAP SuccessFactors security and RBP architecture in a greenfield public-sector environment. Define role/group models, SoD controls, IAM/IDM integrations, governance, access request/approval workflows, audit-ready documentation, and target operating model. Support proposals and stakeholder communication.

Senior individual-contributor sales role responsible for new account acquisition and strategic expansion of video security and AI analytics across Government, Defense, and Critical Infrastructure in Central Europe. Build relationships with operational decision-makers, shape procurement requirements, orchestrate multi-million-dollar integrated solutions, rigorously qualify deals, and maintain accurate forecasting in Salesforce.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Support the SOC and incident response lifecycle, integrate platforms with SOC, perform threat hunting and threat intelligence improvements, automate alerts/escalations, build custom integrations (Python/Bash) in containerized/cloud environments, and collaborate with Tech, Privacy, and Compliance teams.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Lead application security across mobile banking, payments, and regulated products. Conduct threat modeling, secure SDLC design, CI/CD tuning, supply-chain and secrets posture, and vulnerability management. Translate security risk for engineers, regulators, and the CISO while owning processes, tooling, and remediation workflows.

Contract Security Engineer to lead deployment and configuration of BeyondTrust Endpoint Privilege Management, design and tune EPM policies, automate tasks with scripting, collaborate with IAM/IT stakeholders, test and validate policies, create documentation and enable teams. Initial 6‑month remote B2B engagement based in Poland, with potential extension.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Hands-on security engineering role to design, build, and automate detection and protection tooling. Responsibilities include risk assessments, vulnerability scanning, incident response, security architecture (firewalls, IDS, encryption), integrating security into development, automation of security operations, audits/compliance, and documentation.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead information security for the Product and Engagement domain: build a security-first culture, implement and maintain ISMS, ensure security operations (vulnerability scanning, patching), manage incidents, oversee remediation from audits, protect data confidentiality/integrity/availability, identify and manage risks, and report on security KPIs to drive continuous improvement.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.