Security Lead Engineer

Relout
is a place created by ambitious people with a passion for technology. We work for international projects and clients from various industries. We're helping startups, software houses, and enterprises to transform and scale their businesses. From infrastructure management to observability and automation –
we're building the foundation to scale for success.
We hire talented engineers
with a passion
for using software-based approaches to solve complex challenges and problems. You'll be part of the engineering organization with a strong focus on using industry standards and cutting-edge technology.

We are currently looking for a
Security Lead Engineer
, willing to join a project for our strategic client – one of the largest manufacturing companies from
Sweden
, offering IoT solutions and assets management. In this role, you will be instrumental in shaping the security architecture of our client digital services platform. You will leverage your expertise in cybersecurity and hands-on coding experience to design and implement robust security solutions, develop proof of concepts, and drive innovation. If you are passionate about cybersecurity, possess strong design and coding skills, and thrive in a fast-paced, collaborative environment, we want to hear from you.

The company is
well-established in the market
, but even so, the work culture is not like in typical corporations. Teams are
small and autonomous
, engineers are given extensive
freedom of action
, and
remote-first & async-first
approach is promoted. The Scandinavian work culture also places a strong emphasis on
work-life balance
, which is promoted and shared in both the project itself and among rest of Relout.

Responsibilities

• Work within a team of Tech Leads & Architects to introduce compliance, risk minigations and overall security strategies and policies
• Collaborate closely with developers/SecOps to implement security policies, guardrails and initiatives.
• Lead architecture reviews, workshops, design discussions, and incident response activities to ensure the security and resilience of our systems.
• Lead the design and development of proof of concepts to demonstrate the feasibility and effectiveness of security solutions for our digital services platform.
• Identify and document security requirements (threat modelling, risk assessments, and regulatory needs) early in the development process.
• Conduct thorough security reviews of code, architecture, and configurations to identify vulnerabilities and ensure compliance with security best practices.
• Design and carry out penetration tests, identify vulnerable areas of our solutions and design mitigation strategies.
• Write clean, well-documented code to implement security controls, encryption mechanisms, access management policies, and other security features.
• Provide technical leadership on security-related initiatives. Promote security awareness and best practices within division's team members
• Perform security risk reporting in a transparent way to the organization & stakeholders
• Follow compliance and regulations (CRA, NIS2, ISO/IEC 27001, NIST)

Requirements

• Proven experience (5+ years) as a Security Lead\ Architect or a similar role.
• Experience with cloud security, AWS Cloud Security and Prisma Cloud
• Deep understanding of cybersecurity principles, practices, and technologies, including encryption, authentication, access control, and network security.
• Familiarity with common security frameworks and standards (e.g., ISO 27001, NIST, PCI DSS) and experience with compliance assessments and audits.
• Excellent analytical and problem-solving skills, with the ability to design and implement complex security solutions
• Exceptional communication and collaboration skills, with the ability to clearly articulate business risks and technical requirements to diverse audiences, and drive alignment across departments.
• Fluent verbal and written skills in Polish and English

Nice to have:

• Experience with SAML/OAuth/OIDC compliant frameworks and software such as KeyCloak, Auth0, Azure ADB2C, Okta, Curity, or other relevant components.
• Familiarity with serverless and container based workloads particularly in AWS
• Experience with CI/CD processes and tools (based on Gitlab)
• Relevant certifications such as CISSP, CISM, AWS Certified Security - or equivalent, are highly desirable

We offer

• Flexible contract currency of your choice (PLN/EUR/SEK)
• atractive salary in the range of pln/net/b2b/month
• Flexible work arrangements and remote work options
• Professional development and training opportunities
• Collaborative and inclusive work environment
• Opportunity to work on cutting-edge technologies and make a meaningful impact in the dairy industry
• Regular company events and integrations (meetups)
• Unlimited legal advice & support with B2B partnership and self-employment
• Missing anything you like? Luxmed, Multisport? Ask us about it