Security Operations Specialist

On The Spot brings startups and disruptive tech companies to the local market, offering engineers the opportunity to work on innovative, high-impact products. Join us and become a member of their R&D team while we take care of employment, HR support, a benefits package, and an enjoyable work environment.We are building a local Polish team for a customer who is a US-based B2B technology company. ‍
They develop an AI-powered skills assessment and workforce development platform. It helps enterprises assess employees’ and candidates’ capabilities, identify skill gaps, and guide development across areas such as AI, data, and technology. Companies use these insights to support hiring, upskilling, and workforce planning.

We are looking for a Security Operations Specialist to take ownership of information security operations and collaborate closely with the engineering team to ensure robust security practices are in place. ‍
Please note: ‍
📌 This is a 6-month project role, with a potential possibility of extention.
📌 The role requires working closely with the US team, with working hours overlapping until 10:00 PM Warsaw time.

Responsibilities
• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable;
• Coordinate penetration testing engagements and drive the remediation of identified findings;
• Maintain security documentation, metrics, remediation records, and technical response playbooks;
• Review and improve security processes and controls across the entire engineering organization;
• Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls;
• Maintain cloud security standards and align processes with security frameworks such as SOC 2 and NIST;
• Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction.

Requirements
• Proven experience in security monitoring and vulnerability management;
• Experience coordinating penetration testing and following up on findings;
• Practical experience with Cloud Security and industry frameworks such as SOC 2 and NIST;
• Proactive approach with the ability to work independently, prioritize tasks, and deliver results in a lean team environment.

Nice-to-Have
Hands-on experience using AI tools to enhance security operations and streamline workflows.