Cloud Security Engineer

Title: Cloud Security Engineer Company: Tango Location: Warsaw / Warszawa / PL / On-site

Description Tango is a successful, market leader, a live-streaming Platform with 450+ Million registered users, in an industry projected to reach $240 BILLION in the next couple of years. The B2C platform, based on the best-quality global video technology, allows millions of talented people around the world to create their own live content, engage with their fans, and monetize their talents. Tango live stream was founded in 2018 and is powered by 500+ global employees operating in a culture of growth, learning, and success! The Tango team is a vigorous cocktail of hard workers, creative brains, energizers, geeks, overachievers, athletes, and more. We push the limits to bring our app from “one of the top” to “the leader”. The best way to describe Tango's work style is not to use the word “impossible”. We believe that success is a thorny path that runs on sleepless nights, corporate parties, tough releases, and of course our users' smiles (and as we are a LIVE app, we truly get to see our users all around the world smiling right in front of us in real-time!). Do you want to join the party?

Responsibilities Tango is a global live-streaming platform serving a large international audience across a multi-cloud infrastructure. We are building out our security function, and cloud security is the centre of that investment. We are looking for a Cloud Security Engineer to help build and strengthen the security foundations of our cloud environment. You’ll work closely with platform, infrastructure, and engineering teams to design practical security controls, improve our cloud security posture, automate security processes and help the organization scale securely. This is a hands-on role for someone who enjoys solving real security problems in production environments - not just writing policies or reviewing designs.

• Design and implement security controls across our cloud infrastructure.
• Improve cloud IAM, identity, access, and privilege management.
• Build security guardrails and controls using Infrastructure-as-Code and automation.
• Partner with platform and engineering teams to secure cloud workloads and Kubernetes environments.
• Identify and reduce security risks across cloud infrastructure, workloads, identities, and deployment pipelines.
• Help establish security standards, monitoring, and governance as our cloud environment evolves.
• Investigate and respond to cloud security incidents when they occur.
• Automate repetitive security processes and improve the efficiency of the security team.
• Work closely with engineers and technical leadership to make security practical, scalable, and easy to adopt.
• Help take security capabilities from an initial or immature state to a well-governed, measurable security program.

Requirements

• 4+ years of security engineering experience, including hands-on experience securing production cloud environments.
• Strong practical experience with at least one major cloud provider. GCP experience is preferred, but strong AWS or Azure experience is also relevant.
• Solid understanding of cloud IAM, permissions, service identities, federation, and privilege management.
• Hands-on Infrastructure-as-Code experience, preferably Terraform.
• Experience securing Kubernetes or containerized workloads.
• Ability to automate security processes and controls using Python, Go, or another scripting/programming language.
• Experience improving the security posture of a cloud environment and responding to cloud security incidents.
• Strong communication skills and the ability to influence engineering teams without formal authority.
• Professional working proficiency in English.

Nice to have:

• Kubernetes security experience, including workload identity, admission control, or network policy.
• Container and image supply-chain security experience.
• Runtime security experience.
• Policy-as-code experience.
• Experience with Okta or another enterprise identity provider.
• Experience designing complex cross-project or cross-account trust relationships.
• Go development experience.
• Experience communicating security risks and strategy to senior leadership.

What we offer:

• Stock options grant (we’re a Silicon Valley Company)
• Competitive salary
• Medical insurance for you and 75% off for your relatives
• On-site position with 4 days at the office and 1 day WFH
• Budget for lunch
• Parking
• Multisport card
• Cheerful team spirit and fun office atmosphere

If this sounds like you, apply and help empower live entertainers and creators to build independent businesses around their live talents.