security engineer in cloud and application security

airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Its products serve hundreds of millions of users and more than one million customers worldwide. The security team protects user data and keeps the platform stable, working with product, engineering, and operations teams to reduce security risks from design through production.

• Secure AWS and GCP environments through access management, network segmentation, encryption, and key and secrets management
• Identify and fix cloud misconfigurations and security risks
• Set up security logging and monitoring, and investigate suspicious activity
• Test web, mobile, and network-based application security
• Run and improve SAST, DAST, and SCA tools and integrate them into CI/CD pipelines
• Support secure product development through architecture reviews, threat modeling, and risk assessments
• Explain security findings and work with engineers to resolve issues
• Investigate, triage, and contain application, infrastructure, and user-related security incidents, and write post-mortems
• Prepare for SOC 2 and CASA audits and external assessments with product and compliance teams
• Configure and monitor the CDN

• 4+ Years of professional experience in information security, application security, or a related field
• Hands-on experience securing AWS and/or GCP
• Practical experience choosing, setting up, and integrating SAST, DAST, and SCA tools into CI/CD
• Experience testing the security of web, mobile, or network applications
• Experience handling incidents from investigation through post-mortem
• Good knowledge of secure development practices across the SDLC, including threat modeling
• Working knowledge of Bash, Python, Go, or Terraform
• Clear communication skills and the ability to explain risks so teams act on them
• English B2 or higher, written and spoken
• Будет плюсом: experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF; previous experience as a DevOps engineer or developer

• Salaries reflect local market conditions and experience
• Performance-based bonus system and stock options
• Courses, conferences, and access to learning resources
• Benefits tailored to each country, including health coverage, wellness programmes, and fitness options
• Quarterly company-wide Mental Health Days
• Flexible arrangements for parents, a junior club for kids, company-wide family days, and a pet-friendly approach
• Charitable initiatives through the airSlate Care programme, including humanitarian aid in Ukraine and other regions, matching employee donations, and support for causes chosen by teams
• **Full-time** employment