Security Engineer (SOC) | AWS Security & Incident Response

📍 Location: Kraków (priority) / Poland 🌍 Work format: On-site in Kraków preferred, other locations in Poland considered 💼 Employment: Full-time, direct hire preferred 💰 Rate: $30–35/hour 🧠 Experience: Mid–Senior 🗣 Language: English B2-C1 📅 Start: ASAP

🏢 Client: Fintech / Payments Platform

🔹 Project Overview We are looking for a hands-on Security Engineer to take ownership of threat detection, incident response, security automation, and platform security controls for a modern fintech payments platform.

🎯 Key Responsibilities:

• Build, maintain, and improve security detection systems.
• Monitor threats and investigate security incidents.
• Perform incident response, log forensics, root-cause analysis, and attack timeline reconstruction.
• Develop security automation and detection tools using Python.
• Manage AWS security services and controls.
• Configure and optimize WAF rules and security policies.
• Perform vulnerability management, credential rotation, and access reviews.
• Maintain Linux security, patch management, and system hardening.
• Identify and address web application and API security vulnerabilities.

🛠 Requirements:

• Strong hands-on AWS security experience (Lambda, WAF/WAFv2, GuardDuty, Inspector2, CloudWatch Logs Insights, Secrets Manager).
• Python experience for security automation and detection tools.
• Solid understanding of web application and API security (OWASP, IDOR, authorization bypass, API abuse).
• Linux system administration, patch management, and hardening.
• Practical incident response experience, including log forensics and root-cause analysis.
• Ability to independently build and maintain security detection systems.
• Experience working with security controls in production environments.

⭐ Nice to Have:

• Fintech/payments industry experience.
• Knowledge of PCI DSS.
• Ability to review PHP/Laravel and Angular application code.
• Experience developing security policies and conducting access reviews.

❗ Important: This is a hands-on ownership role. We are looking for an engineer who can independently build and operate security processes, not just monitor SOC alerts and escalate incidents. Candidates must be based in Poland. Kraków is the preferred location.

📩 Have a suitable candidate?

Please reply to this request in the chat, include the Request ID, and tag the responsible manager:

👤 Ivan B | recruiter contact

——— Контакт: recruiter contact Компания: GULTIM