Staff Security Engineer

Stack

Responsibilities

• ▹Identify systemic security risks across applications, on-prem infrastructure, cloud environments, internal platforms and software development processes
• ▹Perform security architecture reviews for existing and new systems
• ▹Work directly with engineering teams to identify security weaknesses early in the software development lifecycle and design practical ways to address them
• ▹Partner with the SOC to improve detection capabilities, analyze attack patterns and incidents, and translate findings into better detection rules, security controls and long-term architectural improvements
• ▹Design and help implement security controls, tools, automation and services that can be reused across engineering teams
• ▹Define and evolve technical security standards, engineering guidelines, reference architectures and security best practices
• ▹Review complex technical designs and provide actionable security recommendations without unnecessarily blocking engineering teams

Requirements

• ▹8+ years of professional experience in security engineering, software engineering, infrastructure security, product security or closely related technical roles
• ▹Strong hands-on experience in security engineering and designing security controls for production environments
• ▹Experience with large-scale distributed systems and high-throughput environments
• ▹Polish and English language is a must (min. B2/C1)
• ▹Experience performing security architecture reviews, threat modeling, technical security assessments or similar security design activities
• ▹Strong understanding of application security, infrastructure security, network security, authentication, authorization and common attack techniques
• ▹Experience securing cloud and on-premise environments
• ▹Good understanding of Linux, containers, Kubernetes, networking and modern distributed systems
• ▹Programming or scripting experience in at least one general-purpose language such as Python, Go, Java or C++

Nice to have

• ▹Technologies: Google Cloud Platform and on-prem solutions, Kubernetes, GCP serverless services, Argo CD and Argo Workflows, PostgreSQL, Google Cloud SQL, GitHub, Gerrit, Terraform, Terragrunt, GitHub Actions, Jenkins

Soft skills

What we offer

• ▹Cutting-edge technology on large-scale, dynamic projects
• ▹Extremely flexible cooperation conditions: you work when it is convenient for you, and you can work fully remotely
• ▹Purpose-driven work: your growing knowledge will be used in practical applications directly connected to business results

About the company

RTB House is a next-generation performance demand-side platform (DSP) that uses proprietary deep learning algorithms. Founded in 2012, it operates in 90+ markets and is built on private-by-design, first-party advertising.