First Security Owner — Hands-on, Remote SaaS Defender

3 dni temu

Polska, Województwo śląskie PeopleForce Pełny etat 393 000 zł - 568 000 zł/rok

Bezpłatnie za pośrednictwem poczty elektronicznej lub Google

Zapisz tę ofertę pracy i uporządkuj wyszukiwanie

Utwórz bezpłatne konto, aby zapisywać oferty pracy, tworzyć alerty i wracać do tego ogłoszenia ze swojego pulpitu nawigacyjnego.

Zapisz zadanie Zapisz i utwórz alert

Bezpłatnie za pośrednictwem poczty elektronicznej lub Google

Kontynuując, akceptujesz nasze Warunki & Politykę prywatności.

Senior Security Engineer / Security Owner (Hands-on)

Full Time ·

Europe

About PeopleForce

PeopleForce is an all-in-one HR platform that helps companies manage the entire employee lifecycle, streamline HR processes, and create better employee experiences.

As we grow, protecting our product, customer data, and internal systems becomes increasingly important. Security is not just about meeting compliance requirements — it is about reducing business risks, maintaining customer trust, and enabling our product and engineering teams to build and scale safely.

Why This Role Matters

We are looking for aSenior Security Engineer / Security Owner to become our first dedicated security hire and take hands-on ownership of security across PeopleForce.

Today, we need someone who can assess where our most significant security risks lie, determine what needs to be addressed first, and personally drive the implementation of practical solutions. We are not looking for someone who only defines policies, manages frameworks, or delegates technical work to other teams.
You will work closely with our VP of Engineering, engineers, leadership, Legal, and external security providers to build a security foundation that fits our product, technical environment, and business priorities.

This role combines technical ownership with strategic prioritisation. You will have the autonomy to make decisions, influence engineering practices, and build security processes from the ground up — while staying close to the actual implementation.

Your goal is to build a practical, risk-driven security foundation for PeopleForce — identifying what matters most, implementing effective solutions, and helping the business grow securely without unnecessary complexity.

What You’ll Be Responsible For

1. Identify and Reduce Real Security Risks

Assess security risks across our product, cloud infrastructure, engineering workflows, customer data, and internal systems.
Identify the most critical gaps and prioritise them based on business impact, exploitability, and remediation effort.
Turn security assessments, penetration test results, vulnerabilities, and customer requirements into clear, actionable engineering tasks.
Track remediation through to completion and verify that implemented controls work as intended.
Build and maintain a practical security roadmap aligned with business priorities.

2. Make Product and Application Security Part of Engineering

Integrate security into the software development lifecycle (SDLC), application architecture, code reviews, and CI/CD pipelines.
Review APIs, authentication, authorisation, and other security-critical product components.
Implement and improve security tooling, including SAST, DAST, dependency scanning, secrets detection, and Infrastructure as Code scanning.
Introduce threat modelling and security reviews where they provide meaningful risk reduction.
Work directly with engineers to resolve vulnerabilities and prevent recurring security issues without creating unnecessary friction in development.

3. Secure Cloud Infrastructure and Access

Improve the security of our cloud environment, preferably GCP, including infrastructure configuration, logging, monitoring, and access controls.
Strengthen IAM, privileged access, secrets management, and identity security.
Improve security across CI/CD, Infrastructure as Code, and containerised environments.
Review endpoint and internal system security, including SSO, MFA, EDR, MDM, and Google Workspace.
Help establish appropriate controls for customer data protection, third-party access, and vendor security.

4. Build Practical Security Operations and Incident Readiness

Develop and maintain practical vulnerability management and security risk management processes.
Establish incident response procedures and ensure we are prepared to respond effectively to security incidents.
Coordinate incident response with Engineering, leadership, and external security providers when needed.
Own relationships with external providers supporting security monitoring, penetration testing, vulnerability assessments, and incident response.
Evaluate external findings critically, determine which actions are necessary, and ensure that agreed improvements are implemented.

5. Support Customer Trust and Business Growth

Support enterprise customer security reviews, questionnaires, and security calls.
Help translate customer security expectations into appropriate technical controls.
Support compliance readiness and security requirements relevant to enterprise customers, including ISO 27001 where applicable.
Communicate security risks, priorities, trade-o

First Security Owner — Hands-on, Remote SaaS Defender

Zapisz tę ofertę pracy i uporządkuj wyszukiwanie

Senior Security Engineer / Security Owner (Hands-on)

About PeopleForce

Why This Role Matters

What You’ll Be Responsible For

1. Identify and Reduce Real Security Risks

2. Make Product and Application Security Part of Engineering

3. Secure Cloud Infrastructure and Access

4. Build Practical Security Operations and Incident Readiness

5. Support Customer Trust and Business Growth

Podobne oferty w Polska

Glowne miasta

Ameryka

Europa

Azja / Oceania

Afryka

First Security Owner — Hands-on, Remote SaaS Defender

Zapisz tę ofertę pracy i uporządkuj wyszukiwanie

Senior Security Engineer / Security Owner (Hands-on)

About PeopleForce

Why This Role Matters

What You’ll Be Responsible For

1. Identify and Reduce Real Security Risks

2. Make Product and Application Security Part of Engineering

3. Secure Cloud Infrastructure and Access

4. Build Practical Security Operations and Incident Readiness

5. Support Customer Trust and Business Growth

Podobne oferty w Polska

Glowne miasta