Cloud Security Specialist - CNAPP

Responsibilities:

• Requirements gathering and analysis: Partner with stakeholders (architects, cloud/container engineers, capability leads, control owners) to capture and document functional and non-functional requirements for CNAPP-driven assessment, triage, and reporting.

• Provide guidance on interpreting security findings, risk context, and control expectations, support consistent triage and assessment approaches.

• Shape work for agile delivery, including goals, dependencies, and sufficient technical detail for engineering execution.

• Work with CNAPP engineering and partner teams (Cloud Services, Containers, Cyber) to maintain traceability from requirements → technical design → delivered capability.

• Support stakeholders new to CNAPP on how to consume outputs (findings, risk signals, posture metrics) and translate needs into clear requirements.

• Run sessions to agree design approaches, validate solutions, and drive sign-off for assessment/triage workflows and reporting outputs.

• Define validation approach (including acceptance criteria where needed) to ensure delivered capabilities meet agreed requirements and are usable for CSAT assessment/testing objectives.

• Map and support integrations/APIs between CNAPP components and HSBC systems (e.g., ticketing workflows, downstream reporting, data lake integrations for global metrics).

Technical Skill Set Required:

• 5+ years’ experience as cloud security SME in cloud projects, security and compliance platforms

• Hands on knowledge in cyber security vulnerability scanning, configuration baseline, compliance, inventory e.g. CNAPP, CSPM etc.

• Proven experience in Agile/Scrum environments writing epics, features, and user stories.

• Experience in Databricks or any equivalent data engineering platform is preferred.

• Excellent stakeholder management, facilitation, and communication skills.

• Experience with API integrations, microservices, and container orchestration (Kubernetes, AWS, GCP cloud) and DevOps processes

• Preferred familiarity with regulatory framework e.g. PCI-DSS, CIS benchmarks, etc.

• Preferred relevant certifications e.g. public Cloud (AWS, GCP, Azure)

We offer a full-time employment contract 

• Location: Kraków (hybrid, 6 office visits/month).

• Stable and long-term cooperation 

• Well-defined career path at the European leader in engineering & IT consulting 

• Opportunity to relocate and work in different ALTEN Polska branches 

• After completion of the project, opportunity to engage in a subsequent one within the company 

• Introduction and cooperation with dedicated Competences Manager 

Benefits:

• Medicover medical care 

• Medicover dental care 

• Medicover Benefits platform 

• Medicover Sport card 

• Referral Program  

• Layette for a newborn employee’s child 

• Group life insurance 

• Pension scheme 

We also guarantee:

•  Access to professional certifications with our technology partners (e.g. Google, ISTQB) 

• Access to relevant industry events 

• Access to the Knowledge Sharing Program 

• Access to Referral program 

We also offer cooperation based on a B2B or Contract of mandate (UZ).

Do not hesitate and join us!

NOTICE: We kindly inform you that we will contact the selected people.