Специалист по информационной безопасности

About the Role

Veeam Data Cloud is rapidly scaling, and we’re committed to unifying our security approach across all teams to ensure consistent product protection.

We’re seeking a Security Tech Lead to drive the design and rollout of standardized security solutions and help establish a dedicated Software Security Engineering platform team. In this role, you’ll work closely with the Director of Security Engineering to turn our unified strategy into an actionable engineering roadmap, shaping a strong and cohesive security framework.

What You’ll Do

• Lead the architecture and implementation of shared security primitives across Veeam Data Cloud
• Translate high-level security strategy into a concrete, prioritized engineering roadmap for cloud services and platform capabilities
• Act as a hands-on technical leader – write and review production code, drive design and code reviews, mentorship
• Establish and promote secure-by-default patterns and shared libraries to streamline security across teams 
• Build the foundation for a Software Security Engineering platform to manage shared security services and tools 
• Collaborate with product, platform, SRE, and compliance teams to ensure security solutions are robust and easy to adopt 
• Enhance security posture through automation, guardrails, and policy-as-code 

Technologies You’ll Work With

• Languages & Frameworks: Go, Python, and TypeScript (and related service/API frameworks)
• Cloud & Platform: Modern cloud-native architectures (microservices, event-driven systems, multi-tenant SaaS) using AWS, Azure, and GCP
• Security & Identity: Authentication and authorization services, identity providers, security control planes, guardrails, secure logging
• Tooling & Practices: Code and design review, CI/CD, observability and logging stacks, policy-as-code and security automation

What You’ll Bring

• Strond coding skills (Golang, Python, or TypeScript)
• Extensive experience building distributed, cloud-native systems
• Practical expertise in authentication/authorization, security guardrails, and secure observability for production systems
• Proven technical leadership: architecture, roadmap influence, and mentoring engineers
• Strong product mindset, focusing on platform security that empowers other teams
• Skilled at cross-team collaboration and clear communication of complex topics
• Preference for automation, reusable platforms, and secure-by-default approaches over one-off solutions

Bonus Skills

• Experience building or leading platform and product security teams providing shared services to multiple product teams
• Background in multi-tenant SaaS and large-scale control/data planes
• Familiarity with modern security practices (e.g., zero trust, least privilege, policy-as-code, security service meshes)
• Experience working with regulatory or enterprise security requirements

What You’ll Get 

• 25 vacation days, 4 sick days, 21 paid medical leave days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Premium private medical insurance for employees and dependents
• Daily meal vouchers for restaurants and groceries (180 CZK per working day)
• Flexible cafeteria platform with thousands of lifestyle benefit options
• Multisport Card for gym and wellness, with family add-on options
• Annual public transport reimbursement up to a set limit
• Corporate mobile plan with optional family tariff
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

#LI-TK1

About the Role

Securiti's platform processes billions of data events per day across hundreds of enterprise clouds. As a DevSecOps Engineer, you will build and maintain the invisible infrastructure that makes this scale possible—ensuring developers can ship features daily while maintaining fortress-level security.

You will be responsible for designing self-healing deployment pipelines that turn infrastructure into code, security into automation, and complexity into reliability. Your work ensures that when a customer onboards petabytes of data, our platform scales transparently—without manual intervention.

Responsibilities

• Security-First Infrastructure: Architect and implement infrastructure-as-code using Terraform and CloudFormation, ensuring every deployment follows zero-trust principles and least-privilege access models.

• Kubernetes at Scale: Design and optimize our Kubernetes clusters to handle massive workloads, implementing intelligent autoscaling, pod security policies, and network segmentation that protects sensitive customer data.

• Zero-Downtime Deployments: Build sophisticated CI/CD pipelines using ArgoCD, Spinnaker, and GitOps patterns that enable blue/green and canary deployments—allowing us to ship multiple times per day with zero customer impact.

• Observability Engineering: Implement comprehensive monitoring and alerting using Prometheus, Grafana, and ELK, creating dashboards that surface anomalies before they become incidents.

• Multi-Cloud Orchestration: Manage infrastructure across AWS, Azure, and GCP, building abstraction layers that allow our platform to run anywhere while maintaining consistent security postures.

• Performance Under Fire: Be on-call to diagnose and resolve production issues in real-time, using your deep systems knowledge to troubleshoot complex distributed systems problems across the stack.

• Automation-First Mindset: Write Python and Go tooling that automates repetitive operational tasks, turning hours of manual work into seconds of automated execution.

Requirements

• Experience: 5+ years of software development with deep operational experience in cloud-native environments (AWS, Azure, GCP).

•  Infrastructure as Code Mastery: Expert-level proficiency with Terraform or AWS CloudFormation, with a portfolio of reusable modules and patterns.

• Container Orchestration: Production experience running Kubernetes at scale, including deep knowledge of networking, security contexts, and stateful workloads.

• CI/CD Architecture: Hands-on experience designing GitOps-based deployment pipelines using tools like ArgoCD, Spinnaker, Jenkins, or GitHub Actions.

• Development Skills: Professional coding ability in Python or Golang—you're not just configuring tools, you're building them.

• Database Operations: Working knowledge of SQL (Postgres), NoSQL (MongoDB/Elasticsearch), and Graph databases (Neo4j, Neptune) for operational troubleshooting and performance tuning.

• Linux & Networking Fundamentals: Deep understanding of Linux systems administration, bash scripting, network routing, load balancing, and service mesh architectures.

• Monitoring & Observability: Experience implementing full-stack observability with metrics, logs, and traces using Prometheus, Grafana, ELK, or similar tooling.

Bonus Points

• Security Certifications: AWS Security Specialty, CKS (Certified Kubernetes Security Specialist), or equivalent security-focused credentials.

• Service Mesh Experience: Hands-on work with Istio, Linkerd, or Consul for advanced traffic management and zero-trust networking.

• Chaos Engineering: Experience with fault injection frameworks (Chaos Monkey, Litmus) to build resilient systems.

• GitOps Evangelism: You've championed GitOps practices and trained teams on declarative infrastructure patterns.

• Cost Optimization: Track record of reducing cloud spend through intelligent resource management and architectural improvements.