Position: Lead Security Engineer, Poland
Company: Surprise
Category: Security
Experience required: 5y
English level: upper

Our Surprise Box, and delightful companion app, is the most exciting way to get amazing goodies from brands you love and brands you’re about to love. With daily games, the ability to send and get Surprises from friends, and Grand Surprises – every day is filled with wow!

We are looking for an experienced and capable Security Lead to join our team in Warsaw. This role offers tremendous opportunities to build a highly scalable, highly stable, easily maintainable back-end architecture; to push the boundaries of fault-tolerant programming and work with a broad range of public and proprietary APIs.

So, if you’re ready to make an enormous impact in a fast-paced, high-growth environment and see your fingerprints on a truly global product, we want to hear from you!

What will you be doing?

Develop and implement an Information security strategy;
Contribute to all levels of the architecture from a security perspective;
Act as the AWS cloud security subject matter expert;
Provide guidance on secure software development at all stages of the SDLC;
Design and implement SAST and DAST tools CI/CD pipelines;
Work closely with Engineering teams, DevOps and IT teams to implement security controls;
CoordinateImplement SIEM implementation;
Help to analyze, troubleshoot, and investigate security-related anomalies and incidents;
Develop and drive internal security awareness program;
Lead Information security team.

What we are looking for?

6+ years of experience in security engineering;
2+ years of experience in the position of Lead Information security engineer;
Experience with one of the following compliances: SOC 2, ISO27k series, or PCI DSS;
Familiar with GDPR or CCPA regulations;
Advanced experience with AWS cloud services;
Experience in IT security;
Advanced hands-on experience with security tools: SAST, DAST, SIEM, IDS/IPS, EDR, SOAR;
Coding/scripting experience;
Experience with Linux and Networking;
Knowledge of the most common implementations of the threats, prevention, and protection tactics;
Experience implementing effective incident response process;
People management experience;
Upper Intermediate English level or higher (B2+).

Benefits

Ultramodern offices in the heart of Warsaw;
Work on interesting and challenging projects, while building a pioneering software category;
Great atmosphere, with the vibe and energy of a high-growth tech company;
Competitive salaries;
Close collaboration between international team members;
Corporate activities and parties;
20 Paid Time Off days, Public Holidays of Poland;
And, of course, we use Surprise internally!