Xebia is a global AI-first, digital transformation, and engineering partner. With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions.
We specialize in Artificial Intelligence, Data and Cloud, Intelligent Automation, and Digital Products, combining deep technical expertise with a strong focus on engineering excellence and a people-first culture.
In the CEE region, we’re a team of nearly 1,000 experts delivering modern applications, data platforms, and AI solutions for clients such as Millennium, ING, Play, Edenred, Arabian Drilling, FedEx, Leroy Merlin, Truecaller, Volotea, Schmitz Cargobull, and many, many more.
You will be:
assessing and documenting the security posture of cloud-based SaaS and on-premises services,
organizing and coordinating penetration tests, code scanning, cloud infrastructure scanning, and pipeline security assessments,
identifying security gaps and helping teams prioritize and remediate security risks,
establishing standardized minimum security requirements across products and development teams,
driving the adoption of Security by Design principles across cloud and application environments,
defining and improving cloud security practices for Azure-based and hybrid environments,
integrating security controls and scanning practices into development and CI/CD processes,
supporting the development of a security roadmap and driving continuous security improvements across the organization.
Your profile:
strong experience in Cloud Security and Application Security,
practical experience using AI-powered assistants (e.g. Claude Code, GitHub Copilot, Cursor) to improve productivity, quality, or decision-making in software delivery,
strong hands-on experience securing Microsoft Azure environments and workloads,
experience securing hybrid infrastructure, particularly on-premises environments integrated with Azure,
good understanding of AWS security services and best practices,
experience with cloud security architecture and governance, including Azure Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF),
a good understanding of Windows-based environments and enterprise infrastructure,
hands-on experience with vulnerability management, security assessments, security scanning, penetration testing coordination, threat modelling, and risk assessment,
experience implementing Security by Design principles across cloud and application environments,
experience integrating security controls and scanning into CI/CD and DevSecOps processes,
familiarity with Azure DevOps, GitHub Actions, and GitLab CI/CD,
strong knowledge of modern security frameworks and best practices,
excellent communication and stakeholder management skills and can translate technical security topics into business language,
strong workshop facilitation and consulting mindset and can influence teams without direct authority,
experience creating security strategies or operating models at organizational level as an advantage,
experience with .NET environments, Terraform or other Infrastructure as Code tools, and container/Kubernetes security as a plus,
relevant certifications such as CISSP, CCSP, AZ-500, SC-100, or AWS Security Specialty as an advantage,
fluent English (at least B2 level).
Work from the European Union region and a work permit are required.
... using tools for code security and vulnerability scanning; automating security processes for application risk management., Strong expertise in Azure and Google Cloud Platform (GCP) security features and tools (e.g., Azure Security Center, Google Cloud Security Command Center)., Strong understanding of security threats and ...
Wymagane, Azure Cloud, Kubernetes, CI/CD, Cloud Security, Terraform, AI, LLM Mile widziane, Python, AWS, GCP O projekcie, Wspólnie z naszym Partnerem z branży technologii sportowych i mediów cyfrowych poszukujemy doświadczonego/ej specjalisty/ki do świadczenia usług jako Cloud Security Engineer. Projekt dotyczy zabezpieczenia ...
... tożsamości, danych i zasobów chmurowych, Współpraca z zespołami IT, DevOps i infrastruktury przy wdrażaniu bezpiecznych rozwiązań zgodnych z dobrymi praktykami Cloud Security, Wsparcie projektów migracji do chmury oraz transformacji cyfrowej w zakresie bezpieczeństwa, Udział w analizie ryzyka oraz rekomendowanie i wdrażanie ...
Cloud Security Engineer Azure Miejsce pracy: Warszawa Technologie, których używamy System operacyjny - Windows O projekcie Wspólnie z naszym Partnerem specjalizującym się w doradztwie i dostarczaniu rozwiązań chmurowych, danych i AI poszukujemy doświadczonego/ej specjalisty/ki do świadczenia usług jako AI Security Engineer. ...
Senior Cloud Security Consultant Location: Katowice - 2 days office / 3 days remote Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY. The opportunity We currently have a career opportunity for a Senior Cloud Security Consultant to be responsible ...
... zabezpieczaniu środowisk hybrydowych (On-premises / Azure) oraz znajomość infrastruktury opartej na systemach Windows. - Praktyczna wiedza z zakresu Application Security, Cloud Security oraz Infrastructure Security. - Doświadczenie w zarządzaniu podatnościami (Vulnerability Management), przeprowadzaniu ocen bezpieczeństwa oraz ...
... millions of customers, and treat reliability, security, and operational excellence as non-negotiable. This is not an ops or tooling-configuration role: we need engineers who can design and build scalable systems and services, not just apply Terraform. As a Cloud Engineer, you will own deep parts of our cloud and networking ...
... millions of customers, and treat reliability, security, and operational excellence as non-negotiable. This is not an ops or tooling-configuration role: we need engineers who can design and build scalable systems and services, not just apply Terraform. As a Cloud Engineer, you will own deep parts of our cloud and networking ...