Position: Lead Security Engineer
Company: Surprise
Experience required: 5y
English level: upper

**What will you be doing?**

- Develop and implement an Information security strategy;
- Contribute to all levels of the architecture from a security perspective;
- Act as the AWS cloud security subject matter expert;
- Provide guidance on secure software development at all stages of the SDLC;
- Design and implement SAST and DAST tools CI/CD pipelines;
- Work closely with Engineering teams, DevOps and IT teams to implement security controls;
- CoordinateImplement SIEM implementation;
- Help to analyze, troubleshoot, and investigate security-related anomalies and incidents;
- Develop and drive internal security awareness program;
- Lead Information security team.

**What we are looking for?**

- 6+ years of experience in security engineering;
- 2+ years of experience in the position of Lead Information security engineer;
- Experience with one of the following compliances: SOC 2, ISO27k series, or PCI DSS;
- Familiar with GDPR or CCPA regulations;
- Advanced experience with AWS cloud services;
- Experience in IT security;
- Advanced hands-on experience with security tools: SAST, DAST, SIEM, IDS/IPS, EDR, SOAR;
- Coding/scripting experience;
- Experience with Linux and Networking;
- Knowledge of the most common implementations of the threats, prevention, and protection tactics;
- Experience implementing effective incident response process;
- People management experience;
- Upper Intermediate English level or higher (B2+).

**Benefits**

- Ultramodern offices in the heart of Warsaw;
- Work on interesting and challenging projects, while building a pioneering software category;
- Great atmosphere, with the vibe and energy of a high-growth tech company;
- Competitive salaries;
- Close collaboration between international team members;
- Corporate activities and parties;
- 20 Paid Time Off days, Public Holidays of Poland;
- And, of course, we use Surprise internally!