{"id":4192970,"url":"https://alion.io/job/cognism-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":63392,"name":"Cognism","domain":"cognism.com","url":"https://alion.io/company/cognism","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVSS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Claude Code","optional":true},{"name":"Copilot","optional":true},{"name":"Cursor","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-12T17:09:55Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T19:54:06Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"WHO ARE WE\nCognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism’s contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.\nThe Senior Cloud Security Engineer owns the defence and detection of Cognism's cloud environment, reporting to the Director, Security Engineering & Operations. As the senior technical voice on cloud security, you will lead on the development of our cloud security roadmap, and support and mentor the other cloud security engineers on the team. AWS is at the core, but the estate also spans SaaS and managed services: source control, edge and networking, databases, data streaming and messaging, and secure access.\nAs we move from software to infrastructure that customers and their AI agents depend on, our attack surface grows: more APIs, an MCP connector, and data pipelines feeding our proprietary data engine. You will be the engineer who knows which threats matter most to Cognism's cloud infrastructure, and who builds the controls, detections and automation that stop them.\nThis is a hands-on, blue-team role where automation is the default and AI is a force multiplier. You would rather write the code that closes a gap than raise a ticket about it, and you use AI wherever it genuinely speeds up triage, detection engineering, investigation or remediation. You will work closely with Platform, Data Engineering, IT and our 24/7 SOC partner, as a partner to engineering, not a gatekeeper. \nWHAT YOU'LL OWN \nCloud Security Roadmap& Controls \nLead our cloud security roadmap: assess where we are exposed, recommend priorities by threat and business impact, agree the plan with the Director and Engineering leaders, and execute or support on delivery. \nWork with the Platform team to harden our AWS environment across all accounts, and the other technologies that protect our cloud infrastructure, monitoring continuously for misconfiguration and drift. \nAdvise the Director of IT Ops on hardening and monitoring our corporate cloud infrastructure, with IT owning day-to-day operation. \nPartner with the Director of IT Ops and our Platform team on our EDR platform, as our MDR provider, runs detection and response, and IT and Platform own deployment. Security ensures the configuration is right, including policies, exclusions and response settings, and that coverage across endpoints and servers has no gaps. \nStay highly threat-aware: understand Cognism's highest threats, and recommend and embed the controls that mitigate them, prioritising by real-world impact and exploitability rather than coverage. \nGovern the patch management process for cloud workloads, containers and infrastructure, from scanning and risk-based prioritisation through to verified closure. \nReview major architecture changes with Platform and Engineering, building guardrails into pipelines rather than relying on manual review of changes. \nPartner with our Identity and Access Management expert, to govern the access model for our cloud and engineering systems: design how identity and authorisation work across the estate, with preventive guardrails that enforce least privilege by default. \nWork with Data Engineering to ensure our data infrastructure is secure, covering how we ingest, process, access and surface data. \nPartner with the Senior Application Security Engineer so that cloud, API and application controls reinforce each other. \nLogging, Detection, Response& SOC Partnership \nEnsure all critical infrastructure is logged and monitored by our 24/7 SOC. Own log ingestion and logging configuration across cloud and application sources, so the SOC gets the right data with the right coverage, quality and retention. \nAct as the main technical partner to the SOC: give them the business and environment context they need to tune detections and response, review alert quality with them, and keep improving how we detect, triage and respond together. \nPartner with the rest of the security engineering team and our 24/7 SOC to automate response to infrastructure and identity-related incidents, using AI where it genuinely speeds up triage, enrichment or remediation. \nLead investigation and containment for cloud and identity incidents, with the SOC and wider security team covering the rest, and turn post-incident reviews into new controls. \nAutomation & AI-Enabled Security Engineering \nMake automation the default: infrastructure-as-code, detection-as-code, policy-as-code, automated remediation and self-serve guardrails. \nUse AI tooling to do more with less, in triage, detection authoring, investigation and vulnerability analysis. Measure what works, and retire what doesn't. \nHelp the team build safe, repeatable patterns for using AI in security operations. \nCompliance & Evidence \nOwn the ISO 27001 and SOC 2 Type II evidence for the controls you build and run, so it is ready rather than collected at the last minute. \nWHAT WE NEED \nTechnical foundation \nStrong AWS security skills: multi-account guardrails, IAM policy design, network security, encryption and the native security services. \nStrong automation skills: Python or similar, Terraform and CI/CD, and hands-on experience using AI tooling to do more with less. \nHands-on experience working with a SOC on log source onboarding, alert tuning and response automation. \nFamiliarity with EDR/MDR platforms, including reviewing policy and configuration. \nSolid incident response fundamentals in cloud environments. \nWorking understanding of how APIs and agent-facing interfaces (such as MCP) are attacked, and which controls reduce that risk. \nPractical understanding of data platform security: how data is ingested, processed, accessed and surfaced securely. \nCollaboration & influence \nSupport and develop the other cloud security engineers: set technical standards, review designs and detections, share context on priorities, and help them grow. \nPartner to Platform, Data Engineering, IT and the SOC: you earn trust by making the secure path the easy path, not by raising blockers. \nAble to explain threats and trade-offs clearly to engineers, IT leaders and non-technical stakeholders. \nComfortable giving the SOC and engineering teams the context they need, and holding them to account on outcomes. \nMindset \nThreat-aware and risk-based: you can tell a theoretical risk from a real business threat, and prioritise by impact and exploitability, not CVSS score alone. \nAutomation-first: you default to code, guardrails and automated response over manual process and tickets. \nCurious about AI: you see it as both a new threat landscape and a way to make security faster and smarter. \nPragmatic bias toward action: you sequence work sensibly, ship, learn and improve. \nOwnership: you own your controls end to end, from design to evidence. \nWHAT SUCCESS LOOKS LIKE \nA prioritised, threat-led cloud security roadmap is agreed with Security leadership and Engineering and is being delivered, and the other cloud security engineers are clear on priorities and growing in capability. \nAWS guardrails are in place across all accounts, and drift is measured rather than guessed at. \nOur highest threats are mapped to controls and SIEM detections, and the gaps are visible and being closed. \nCritical infrastructure is logged and monitored by the SOC. The log coverage gaps that matter are closed, and SOC alert noise is noticeably lower. \nCommon infrastructure and identity incidents are handled by automated response. \nCrowdStrike is correctly configured and covers the whole estate, with IT, Platform and Security clear on who owns what. \nData infrastructure controls are agreed and embedded with Data Engineering. \nAI is used in day-to-day security work with a measurable effect, such as faster triage or less manual effort. \nThe controls you own pass ISO 27001 and SOC 2 audits, with evidence ready rather than collected at the last minute. \nEXPERIENCE \nTypical background \n\nArea \n\nWhat we look for \n\nCloud and AI security \n\n7+ years in Cloud Security Engineering, with at least 4 years securing AWS in production, and experience mentoring or technically leading other engineers. \nExperience with Securing AI/ML-enabled services, APIs or MCP-style integrations. \n\nAutomation \n\nPython or similar, Terraform and CI/CD, with experience using AI tooling to automate security work \n\nDetection & SOC \n\nHands-on SIEM and log analytics, alert tuning, and working with a SOC or MSSP \n\nEndpoint \n\nFamiliarity with EDR/MDR platforms such as CrowdStrike, including configuration review \n\nIncident response \n\nCloud incident response fundamentals \n\nEnvironment \n\nSaaS or high-growth, data-driven company, working with Platform, Data and IT teams \n\nCompliance context \n\nEnough ISO 27001 and SOC 2 familiarity to own evidence for your controls \n\nNice to have \nKubernetes/EKS and container security. \nThreat hunting or purple teaming. \nExperience with data platform security (pipelines, warehouses, streaming). \nExperience with AI-powered engineering tools such as Claude Code, Cursor or GitHub Copilot. \nCertifications such as AWS Certified Security - Specialty, GCIH or GCFA. \n\nWHY COGNISM\nAt Cognism, we’re not just building a company - we’re building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you’re looking for a place where your work truly makes an impact, you’re in the right spot!\nOur values aren’t just words on a page-they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.\nHere’s what we stand for:\nWe Own the Outcome Together.\n We Deeply Understand our Customers. \n We Celebrate Impact Wherever It Comes From.\nAt Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you’re unsure if you meet every requirement, we encourage you to apply!","description_format":"text","description_chars":10266,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","B2B Company & Contact Data"],"lifecycle":[{"event":"open","at":"2026-11-12T19:54:06Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":40,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T21:01:17Z"},"pay":null,"html_url":"https://alion.io/job/cognism-senior-cloud-security-engineer","json_url":"https://alion.io/job/cognism-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-11-12T21:01:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":44403,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63392},"rest":"https://alion.io/mcp/rest/get_company?id=63392"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcognism-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcognism-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcognism-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cognism-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcognism-senior-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4192970}},{"tool":"search_jobs","arguments":{"company":"cognism.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4192970},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}