Engineer secure AI practices and patterns for Veeam SaaS platforms
Partner with the other technical leads on the team to run vulnerability management as an engineering system
Deliver security controls as Terraform
Build the automation that reduces operational toil
Raise the engineering bar across the team
Participate in an on-call rotation
Technologies You’ll Work With
Terraform as the primary control plane for security infrastructure
Azure: Entra ID and RBAC, Key Vault, Azure Policy, Defender for Cloud, Container Instances, AKS, Container Registry, managed identity and workload identity federation AND AWS equivalents
CSPM for cloud and workload posture, attack paths and container findings
ASPM for SAST, SCA, secrets and IaC scanning in the pipeline
GitHub Actions, GitHub Apps and Azure DevOps for CI/CD
Supply chain provenance tooling: SBOM (CycloneDX or SPDX), artifact signing and attestation (Sigstore / cosign), SLSA-aligned build integrity
Anthropic Claude and Azure OpenAI
Python and Go for the tooling stack, with comfort reading PowerShell and TypeScript
Microsoft Sentinel and Log Analytics for the audit trail
What You’ll Bring
8+ years across security and engineering, with recent depth in cloud platform security and hands-on delivery
Production Terraform at scale. Modules other teams consume, not one-off stacks, and the judgment to know when a control belongs in code rather than a runbook
AI and LLM security specifically: prompt injection, indirect prompt attack surfaces, agent tool-boundary abuse, model exfiltration
Deep Azure: Entra ID and RBAC, Key Vault and key handling, network egress, workload and managed identity, policy enforcement, and a clear view of where the platform defaults leave you exposed
Software supply chain security in practice: dependency risk, build pipeline integrity, provenance and signing, and the judgment to know which controls are worth the developer friction they cost
Owned vulnerability management as an engineer, not a coordinator: ingestion, deduplication, routing, SLA design, and measurable reduction rather than a dashboard
Designed isolation boundaries for untrusted code execution, covering network, identity and data, with a threat model you can defend
Tooling ability in Python or Go sufficient to build and maintain systems rather than only configure vendor products
A track record of setting technical direction others followed, and of shipping production code you can point to. This is a hands-on building role, not an advisory one
Familiarity with regulated-industry expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors actually accept as evidence
Bonus Skills
Hands-on experience with agentic development environments (Claude Code, Cursor, GitHub Copilot Enterprise) and their operational security implications
CSPM and ASPM tooling at production scale, including tuning signal into an owned and closing queue
Kubernetes and container security (AKS, EKS): runtime detection, admission control, image policy
Sigstore, SLSA, in-toto or equivalent provenance frameworks
AWS depth alongside Azure
Contributions to open-source security, supply chain or LLM safety tooling
Relevant certifications (Azure or AWS security specialty, GIAC, or similar)
What You’ll Get
26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
Paid parental, maternity, and paternity leave
Fully covered family medical plan, dental, rehab, and vaccinations
Life, critical illness, and disability insurance
Employer pension contribution via PPK
Monthly Edenred allowance of 450 PLN for meals
MultiSport card fully covered by Veeam, giving access to sports facilities nationwide
Up to 12 free therapy sessions annually, plus legal and financial advice
Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning
Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.
Personal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing.
By submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.
