{"id":3073284,"url":"https://alion.io/job/allegro-bluesec-cybersecurity-engineer","title":"BlueSec Cybersecurity Engineer","company":{"id":1876195,"name":"Allegro","domain":"allegro.eu","url":"https://alion.io/company/allegro-eu","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":98000,"period":"year","method":"role_country_seniority_unknown","sample_n":155},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST CSF","optional":false},{"name":"Terraform","optional":false},{"name":"DNS","optional":true},{"name":"Machine Learning","optional":true},{"name":"Service Mesh","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-22T10:01:07Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-24T00:25:37Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Important things for you\nFlexible working hours in the hybrid model (4/1) - working hours start between 7:00 a.m. and 9:00 a.m. We also have 30 days of occasional remote work.\n\nAnnual bonus based on your annual performance and company results.\n\nOur team is based in Warsaw and Poznań.\n\nAbout the job\nSecure a Large-Scale Hybrid Environment: Build, operate, and improve security controls across Azure, GCP, and on-premises environments supporting one of the region's largest marketplaces.\n\nEngineer Measurable Protection: Work on vulnerability management, patching coverage, cloud security posture management, asset ownership, and compliance controls that make security risks visible, prioritized, and actionable.\n\nModernize Network and Endpoint Security: Help deliver SASE and web-security capabilities, strengthen firewalling and network segmentation, and improve telemetry and protection for workstations and services.\n\nReduce External Exposure Through Automation: Develop monitoring for public domains, IPs, certificates, and services; use automated playbooks to enrich findings, identify owners, create tickets, and support response actions.\n\nImprove Detection and Resilience: Partner with engineering, network, IAM, and service-owner teams to harden identity and cloud configurations, turn security improvements into maintainable services with clear runbooks.\n\nSkills required\nDemonstrate high independence and a self-driven approach - you can take end-to-end ownership of security improvements, from assessment and design through implementation, measurement, and operational handover;\n\nHave hands-on experience securing cloud environments, preferably Azure and/or GCP, including Kubernetes and container workloads, cloud security posture management, configuration hardening, and remediation of security findings;\n\nUnderstand vulnerability management and patching processes, including asset inventory, risk prioritization, exception handling, and collaboration with asset owners;\n\nKnow security standards and control frameworks such as CIS Benchmarks and NIST CSF, and can translate them into practical technical baselines;\n\nHave practical knowledge of IAM and identity security, including privileged access, MFA, and Entra Conditional Access; experience managing security configuration as code, e.g. with Terraform, is a plus;\n\nAre familiar with network-security concepts and technologies such as firewalls, network segmentation, secure web gateways, SASE, DNS, TLS, and proxy routing;\n\nHave experience with security automation, such as workflow orchestration, enrichment, ticketing integrations, or response playbooks;\n\nUnderstand external attack-surface and exposure management, including discovery and monitoring of domains, public IPs, cloud assets, and misconfigurations;\n\nCan create clear technical documentation, runbooks, and remediation guidance, and collaborate effectively with engineering, network, IAM, and service-owner teams;\n\nWant to be proud of the impact they make; they value high-quality security reviews and engage in substantive discussions on software engineering and security best practices;\n\nAre open to developing soft skills and embracing a growth mindset through active participation in team retrospectives and cross-team collaborations;\n\nAre excited about adopting and securing AI technologies, being ready to incorporate AI coding and security assistants into their daily work to maximize efficiency;\n\nCan look for effective, business-enabling solutions to the security requirements set by our ecosystem;\n\nWant to constantly develop and update their knowledge in a rapidly shifting threat landscape;\n\nKnow English at least B2 level.\n\nWhat's in it for you:\nWell-located offices (with e.g. fully equipped kitchens, bicycle parking, terraces full of greenery) and excellent work tools (e.g., raised desks, ergonomic chairs, interactive conference rooms).\n\nA 16\" or 14\" MacBook Pro or corresponding Dell with Windows (if you don't like Macs) and all the necessary accessories.\n\nA wide selection of fringe benefits in a cafeteria plan - you choose what you like (e.g., medical, sports or lunch packages, insurance, purchase vouchers).\n\nEnglish classes that we pay for related to the specific nature of your job.\n\nA training budget, inter-team tourism (see more here), hackathons, and an internal learning platform where you will find multiple trainings.\n\nAn additional day off for volunteering, which you can use alone, with a team, or with a larger group of people connected by a common goal.\n\nSocial events for Allegro people - Spin Kilometers, Family Day, Fat Thursday, Advent of Code, and many other occasions we enjoy.\n\nAnd that's just the beginning! You can read more about the benefits here.\n#goodtobehere means that:\nYou will join a team you can count on - we work with top-class specialists who have knowledge- and experience-sharing in their DNA.\n\nYou will love our level of autonomy in team organization, the space for continuous development, and the opportunity to try new things. You get to choose which technology solves the problem and you are responsible for what you create.\n\nYou will be equipped with modern AI tools to automate repetitive tasks, allowing you to focus on analyzing complex threats, developing advanced security automation, and refining secure architectures.\n\nYou will meet the Allegro Scale, which starts with over 1000 microservices, an open-source data bus (Hermes) with 300K+ rps, a Service Mesh with 1M+ rps, tens of petabytes of data, and production-used machine learning.\n\nYou will become part of Allegro Tech - We speak at industry conferences, cooperate with tech communities, run our own blog (it's been over 10 years!), record podcasts, lead guilds, and we organize our own internal conference - the Allegro Tech Meeting. We create solutions we love (and can) to talk about!\n\nSend us your CV and… see you at Allegro!\n\nYour main responsibilities:\nTake end-to-end ownership of security improvements, from identifying risks and designing controls through implementation, measurement, and operational handover.\n\nBuild and maintain security controls across Azure, GCP, and on-premises environments, with a focus on cloud posture, identity, hardening, and configuration security.\n\nImprove vulnerability-management and patching processes by increasing asset coverage, defining remediation priorities, managing exceptions, and collaborating with system and service owners.\n\nImplement and maintain security baselines based on CIS Benchmarks and NIST principles, including measurable compliance checks and clear remediation paths.\n\nStrengthen identity and access controls, including privileged access, MFA, Entra Conditional Access, and policy-as-code practices.\n\nHelp deliver and operate network and endpoint-security capabilities, including SASE, secure web gateways, firewall rules, network segmentation, and related telemetry.\n\nDevelop external attack-surface monitoring for domains, public IPs, certificates, cloud assets, and exposed services; ensure findings are assigned, prioritized, and tracked to remediation.\n\nMaintain clear technical documentation, service runbooks, alerting, and on-call procedures so that security services are reliable and supportable.\n\nPartner with engineering, network, IAM, and service-owner teams to deliver pragmatic, business-enabling security solutions.","description_format":"text","description_chars":7359,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Apple Macbook","Cafeteria","Flexible schedule"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","E-commerce Platforms","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-22T10:01:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":25,"reasons":["conf:29","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/allegro-bluesec-cybersecurity-engineer","json_url":"https://alion.io/job/allegro-bluesec-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-26T01:23:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1762,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1876195},"rest":"https://alion.io/mcp/rest/get_company?id=1876195"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallegro-bluesec-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallegro-bluesec-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallegro-bluesec-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allegro-bluesec-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallegro-bluesec-cybersecurity-engineer"}]}