{"id":2407980,"url":"https://alion.io/job/artea-lead-cloud-security-engineer","title":"Lead Cloud Security Engineer","company":{"id":1981516,"name":"Artea","domain":"artea.lt","url":"https://alion.io/company/artea-lt","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":131000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":588},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"PowerShell","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST CSF","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-10-02T11:17:17Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-13T01:24:47Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"The bank that’s closer to everyone - yes, that’s us.\nWe are building a new team for a new digital bank from scratch! The new security team will ensure resilience of the bank.\nAs aLeadCloud Security Engineer, You will secure our Azure cloud platform and k8s environments. We are Azure-first and operate in a regulated financial-services environment, so secure-by-default, auditability, and resilience are baseline expectations.\nEvery day, you’ll be #closer and:\nCloud platform security\nSecure-by-default Azure landing zones: network segmentation, private endpoints, Entra ID identity and least-privilege/entitlement management (CIEM), and secrets management (Key Vault).\n\nCloud posture and workload protection via CNAPP / CSPM (Microsoft Defender for Cloud and/or Wiz, Orca, Prisma Cloud) - continuous misconfiguration detection and remediation.\n\nKubernetes & container security\nHarden AKS and the cluster surface: RBAC, Pod Security Standards, admission control (OPA Gatekeeper/Kyverno), network policies, and namespace isolation.\n\nSecure the container supply chain: image scanning, signing and provenance, trusted registries, and hardened base images.\n\nRuntime workload protection and secure secrets handling in-cluster.\n\nCross-cutting\nGet cloud, cluster, and application signals into the SIEM (e.g., Microsoft Sentinel) and support incident response - partnering with detection/IR rather than owning the SOC.\n\nSecure vendor and integration architecture (API gateways, Zero Trust boundaries) for our external ecosystem.\n\nDORA and regulatory assurance - ICT risk, ICT third-party / supply-chain risk, resilience and threat-led penetration testing (TLPT) support - and clear risk communication to engineering, leadership, and auditors.\n\nTo be #closer, you’ll bring:\nHands-on Azure cloud security in production - not just reviewing environments.\n\nStrong Kubernetes and container security: AKS hardening, RBAC, Pod Security Standards, admission control, network policies, and image/supply-chain security.\n\nInfrastructure as Code and scripting (Python, PowerShell, or similar) - you automate guardrails rather than enforce them by hand.\n\nIdentity, least privilege, and secrets management in Entra ID; CNAPP / CSPM tooling experience.\n\nAbility to communicate cloud and pipeline risk to technical and non-technical stakeholders, including auditors.\n\nNice to have\nMulti-cloud awareness (AWS / GCP) beyond Azure.\n\nSIEM and cloud detection experience (Microsoft Sentinel).\n\nApplication security awareness - OWASP Top 10, OAuth2 / OIDC, FAPI 2.0 - enough to partner with product security.\n\nFinancial services / fintech / open-banking background.\n\nDORA or equivalent financial-regulatory familiarity (NIS2, PCI DSS, ISO 27001, NIST CSF).\n\nBeing #closer means you’ll get:\nThe green light for your ideas. Your suggestions will be heard - we value independence, curiosity, and initiative.\n\nA manager who helps you grow. You’ll get clear direction and support while having plenty of freedom to act, learn, and develop.\n\nAn organisation that is changing. Joining Artea means more than just a new name - it means new ideas, perspectives, and opportunities to help shape our culture from within.\n\nAchievements rooted in Lithuania. We’re especially proud to be a Lithuanian bank. We believe our country and our people are unique, and we do everything we can every day to help them realise their potential.\n\nA personal benefits package. Health insurance, a pension savings programme, additional days off, flexible working hours, modern infrastructure - and that’s far from the complete list of benefits!\n\nCompetitive compensation. Your salary will depend on your experience and competencies, so we’re providing an indicative range of EUR5758 - 7792gross per month.\n\nPerformance bonuses. Our employees can earn bonuses based on the performance of the bank, their team, and their own individual performance.\n\nWhat else is important?\nWant to experience what it means to work at Artea Bank ? Fill in the form and send us your information by 31 October 2026, and let’s talk.\nWe can’t wait to show you what it’s like to be #closer!","description_format":"text","description_chars":4105,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security"],"lifecycle":[{"event":"open","at":"2026-10-13T01:24:17Z"}],"visa":[],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.794,"p_room":0.9,"age_days":10,"expected_fill_days":23,"reasons":["conf:4","win:mid"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/artea-lead-cloud-security-engineer","json_url":"https://alion.io/job/artea-lead-cloud-security-engineer.json","meta":{"generated_at":"2026-10-14T02:46:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4214,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1981516},"rest":"https://alion.io/mcp/rest/get_company?id=1981516"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fartea-lead-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fartea-lead-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fartea-lead-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/artea-lead-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fartea-lead-cloud-security-engineer"}]}