Staff Security Engineer

As a Staff Security Engineer, you will play a key technical role in improving the security of RTB House systems, infrastructure, and software development practices.

You will work across engineering teams, including Software Engineering, Platform, Infrastructure, DevOps, Cloud, and our Security Operations Center. Your goal will be to identify systemic security risks, design practical solutions, and help engineering teams build secure systems by default.

This is a senior individual contributor role with broad technical influence, reporting directly to the VP of Engineering. You will not be limited to operating security tools or responding to individual vulnerabilities. You will look at security across the organization, identify areas where we can improve, define technical security standards and architecture, and work directly with engineering teams to implement them.

You will also act as a bridge between Security Operations and Engineering. Insights from incidents, vulnerabilities, threat intelligence, and security assessments should result in concrete improvements to architecture, tooling, development practices, and technical controls.

We are looking for someone who is comfortable going deep technically while also being able to influence engineering decisions across multiple teams.

You Will:

• Identify systemic security risks across applications, on-prem infrastructure, cloud environments, internal platforms, and software development processes.

• Perform security architecture reviews for existing and new systems.

• Work directly with engineering teams to identify security weaknesses early in the software development lifecycle and design practical ways to address them.

• Partner with our SOC to improve detection capabilities, analyze attack patterns and incidents, and translate findings into better detection rules, security controls, and long term architectural improvements.

• Design and help implement security controls, tools, automation, and services that can be reused across engineering teams.

• Define and evolve technical security standards, engineering guidelines, reference architectures, and security best practices.

• Review complex technical designs and provide actionable security recommendations without unnecessarily blocking engineering teams.

Desired Experience: 

• 8+ years of professional experience in security engineering, software engineering, infrastructure security, product security, or closely related technical roles.

• Strong hands-on experience in security engineering and designing security controls for production environments.

• Experience with large scale distributed systems and high throughput environments.

• Polish and English language is a must (min.B2/C1)

• Experience performing security architecture reviews, threat modeling, technical security assessments, or similar security design activities.

• Strong understanding of application security, infrastructure security, network security, authentication, authorization, and common attack techniques.

• Experience securing cloud and on premise environments.

• Good understanding of Linux, containers, Kubernetes, networking, and modern distributed systems.

• Programming or scripting experience in at least one general purpose language such as Python, Go, Java, C++, or similar.

Selected Technologies: 

• Google Cloud Platform & On-Prem solutions

• Kubernetes, GCP serverless services

• Argo CD & Argo Workflows

• PostgreSQL, Google Cloud SQL

• GitHub, Gerrit

• Terraform, Terragrunt

• GitHub Actions, Jenkins

We Offer: 

• Competitive Compensation: We offer an attractive salary package with significant growth opportunities

• Cutting-edge Technology: Engage with the latest technologies on large-scale, dynamic projects

• Wellbeing: extremely flexible working conditions - you work when it is convenient for you and devote as much time as you can; you can work fully remotely

• Purpose-Driven Work: being at the heart of the system, your growing knowledge and competencies will be used in practical applications directly connected to business results