{"id":1085895,"url":"https://alion.io/job/nasuni-senior-security-engineer-cloud-security","title":"Senior Security Engineer - Cloud Security","company":{"id":3836,"name":"Nasuni","domain":"nasuni.com","url":"https://alion.io/company/nasuni","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":105000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":20},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"CVSS","optional":false},{"name":"DNS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-06-17T12:18:34Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-17T20:45:50Z","board_verified":true,"closed_at":null,"days_open":122,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":121},"description":"ABOUT THE ROLE\nWe are looking for a Senior Security Engineer with deep cloud security expertise to own complex security workstreams across our multi-cloud environment and drive our vulnerability management program to the next level of maturity. This is a senior individual contributor role for a security engineer who independently leads complex technical initiatives, influences security decisions across engineering teams, and serves as a trusted cloud security subject matter expert. The role combines deep technical execution with cross-functional influence, while partnering with Security leadership and the Principal Security Architect on broader security strategy and architecture direction.\nYou will operate across cloud security posture management, infrastructure hardening, vulnerability program leadership, and secure DevOps practices, with the seniority to make independent technical judgments, lead cross-functional security initiatives, and mentor colleagues. This role partners closely with the Principal Security Architect to operationalize cloud security standards, implement security controls, and execute security initiatives across Nasuni's cloud environments. You are equally comfortable diving deep into cloud configurations, reviewing security architecture, and advising engineering teams on security trade-offs.\nSuccess In This Role Looks Like\nImproved cloud security posture across key cloud platforms\nIncreased vulnerability remediation effectiveness and SLA attainment\nExpanded visibility and coverage of cloud security controls\nReduced recurring security findings through automation and systemic improvements\nIncreased adoption of secure-by-default cloud engineering practices\nWHAT YOU WILL DO\nCloud Security Engineering and Posture Management\nLead initiatives that continuously improve Nasuni's cloud security posture across AWS, Azure, and GCP, including workload security, IAM hardening, network segmentation, encryption, and least-privilege enforcement.\nLead cloud security assessments and configuration reviews, identifying and remediating misconfigurations and security gaps using Wiz and cloud-native tools.\nDrive zero-trust initiatives and cloud-native security controls across our multi-cloud infrastructure.\nPartner closely with the security leadership to translate architectural standards into enforceable, operational controls, and provide ground-level feedback to shape those standards.\nEvaluate and implement security controls for container and Kubernetes workloads, CI/CD pipelines, and Infrastructure as Code.\nContribute to cloud security architecture and design reviews by providing implementation guidance, operational security expertise, and risk assessments for new technologies and infrastructure changes.\nVulnerability Management Program Ownership\nLead execution and continuous improvement initiatives within Nasuni's vulnerability management program, partnering with Security leadership to influence strategy, tooling direction, prioritization frameworks, and program maturity across AWS, Azure, and GCP.\nAssess and enforce vulnerability SLAs and risk-based prioritization frameworks aligned to business risk appetite.\nAnalyze vulnerability data across environments, synthesize trends, and produce executive-ready reporting on exposure, remediation velocity, and risk posture.\nDrive systemic remediation through collaboration with DevOps, SRE, IT/infrastructure, and engineering teams, moving beyond ticket-by-ticket fixes toward structural improvements.\nContinuously tune and optimize scanning coverage, detection fidelity, and platform configuration across all vulnerability management tooling.\nIdentify program gaps, define improvement roadmaps, and present recommendations to security leadership.\nDevSecOps and Infrastructure Hardening\nPartner with DevOps and SRE teams to embed security controls into CI/CD pipelines, IaC templates, and cloud provisioning workflows.\nDrive adoption of security-as-code practices including policy-as-code, automated misconfiguration detection, and runtime security controls.\nDefine and enforce secure configuration baselines across cloud workloads, operating systems, and network infrastructure.\nAssess and harden container and Kubernetes environments; support secrets management and workload identity practices.\nIncident Response\nSupport the SecOps team by contributing to complex and high-severity incident responses within your domain.\nAdvise the SecOps team on the development and improvement of incident response playbooks and runbooks for cloud and infrastructure-related security events.\nConduct threat hunting in cloud environments and contribute to detection engineering efforts in collaboration with the SecOps team.\nParticipate in post-incident reviews and systemic improvements that reduce recurrence of cloud security events or incidents.\nCompliance and Governance\nPartner with GRC to ensure the vulnerability management and cloud security controls align with compliance requirements.\nOwn technical evidence preparation and control documentation within your workstreams for audit and compliance activities.\nAdvise engineering and business teams on security considerations for new technologies, integrations, and infrastructure decisions.\nMentorship and Team Contribution\nMentor colleagues and peers, guiding technical decisions, sharing expertise, and improving the team's overall cloud security capabilities.\nLead security tooling evaluations and contribute to decisions on platform investments and program improvements.\nDesign, improve, and scale repeatable AI-assisted security workflows that enhance vulnerability analysis, cloud security assessments, remediation prioritization, and operational efficiency while maintaining strong validation, security, and risk-management practices.\nWHAT YOU WILL BRING\nExperience\n6-9 years of experience in security engineering, cloud security, or a closely related discipline.\nDemonstrated ownership of complex cloud security workstreams in a multi-cloud or cloud-native environment.\nProven experience leading or significantly contributing to a vulnerability management program, including tool operation, process design, and stakeholder engagement.\nExperience securing cloud-native SaaS products or operating within complex cloud-first technology environments.\nExperience designing or operationalizing repeatable AI-assisted workflows that improve security engineering, vulnerability management, security analysis, automation, or operational efficiency.\nCloud Security Depth\nDeep hands-on expertise with AWS security, including IAM, VPC/networking, GuardDuty, Security Hub, CloudTrail, KMS, and AWS-native hardening practices. Additional Azure and GCP experience a plus.\nStrong working knowledge of CSPM tools; direct experience with Wiz is highly advantageous.\nExperience with container security, Kubernetes security, and IaC security tooling (Terraform, CloudFormation, or equivalent).\nFamiliarity with CI/CD security integration and DevSecOps practices.\nTechnical Foundations\nStrong understanding of network security, protocols, and infrastructure security fundamentals (TCP/IP, DNS, TLS, VPN, firewall design).\nWorking knowledge of IAM, Zero Trust principles, secrets management, and authentication protocols (OAuth 2.0, OIDC, SAML).\nExperience with scripting or automation for security workflows (Python, Bash, or equivalent).\nDemonstrated ability to validate AI-generated outputs using security expertise, testing, data analysis, or other structured review mechanisms before applying recommendations in production environments.\nFrameworks and Compliance\nFamiliarity with NIST CSF, CIS Benchmarks, and OWASP frameworks.\nStrong command of vulnerability severity frameworks (CVSS, EPSS) and risk-based prioritization methodologies.\nExperience conducting technical risk assessments and security design reviews.\nCommunication and Influence\nAbility to explain complex security risks and trade-offs clearly to both engineering and IT/infrastructure peers and non-technical leadership.\nStrong written communication skills for producing vulnerability reports, security assessments, and architectural recommendations.\nCollaborative working style, you influence through expertise and build trust across teams.\nEducation and Certifications\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field; or equivalent practical experience.\nCertifications preferred: AWS Security Specialty, CISSP, CCSP, GIAC GCSA, or equivalent cloud security credentials.\n#LI-Remote #BI-Remote\n\nAbout Nasuni\nNasuni is the unstructured data foundation for enterprise teams-and the AI that supports them. We manage, protect, and activate the world’s unstructured data so organizations can work smarter, spend wisely, and create safely without limits. As a Vista-backed SaaS data infrastructure company, Nasuni is transforming how enterprises manage file data with a next-generation, AI-ready platform-turning massive file stores into secure, actionable, and AI-ready data for intelligent automation, analytics, and global collaboration.\nWhy Work Here - Europe / Warsaw\nAt Nasuni, you’ll work at the intersection of cloud infrastructure, enterprise data, cybersecurity, and AI readiness. You’ll help build and operate modern systems that support global teams and customers while contributing to a company backed by Vista Equity Partners and connected to a broader ecosystem of software leadership and operational excellence. This is an opportunity to bring hands-on cloud expertise to a collaborative, high-growth environment where reliable infrastructure, automation, and secure access directly enable business scale.\nTo all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.\nNasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs. \nThis privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.","description_format":"text","description_chars":10851,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Cloud Storage & File Sharing","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-09-21T08:58:01Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.154,"p_room":0.28,"age_days":121,"expected_fill_days":40,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nasuni-senior-security-engineer-cloud-security","json_url":"https://alion.io/job/nasuni-senior-security-engineer-cloud-security.json","meta":{"generated_at":"2026-10-17T23:17:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1538,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3836},"rest":"https://alion.io/mcp/rest/get_company?id=3836"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasuni-senior-security-engineer-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasuni-senior-security-engineer-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasuni-senior-security-engineer-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasuni-senior-security-engineer-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasuni-senior-security-engineer-cloud-security"}]}