Senior Security Infrastructure Engineer

Overview

Own and evolve security for production and cloud environments, focusing on network and infrastructure security. Lead secure architecture, exposure management, and security improvements across cloud and operational teams.

What you'll do

• Design and improve network segmentation, WAF controls, egress filtering, and remediation sequencing.
• Review cloud environments for exposed storage, open management ports, logging gaps, stale credentials, and excessive permissions.
• Monitor the external attack surface using DNS, certificate transparency logs, IP-range scanning, and ASM tooling.
• Detect configuration drift and assign ownership for discovered assets.
• Embed security into architecture and change-management reviews.
• Coach engineering and operations teams on security practices.
• Identify risks and define mitigation strategies.

What you'll need

• Proven experience as a security subject-matter expert guiding secure system design.
• Experience with network architecture, segmentation, and production firewall or IDS/IPS platforms.
• Primary experience with Azure permissions and configuration, plus working knowledge of GCP and on-premises components.
• Experience reviewing identity, permissions, exposure, logging, network rules, and secrets in cloud environments.
• Experience maintaining continuous attack-surface visibility and configuration-drift detection.
• Ability to lead cybersecurity defense architecture and explain risks to technical and non-technical audiences.

Nice to have

• Security certifications such as CISSP, GIAC, or CCNP Security.
• Experience with DSPM or cloud-native data-security controls.
• Cloudflare WAF hardening and tuning experience.

Details

• Remote position for residents of Czechia.