Главный специалист по информационной безопасности (безопасность AI-систем)

About the Role

Veeam Data Cloud is rapidly scaling, and we’re committed to unifying our security approach across all teams to ensure consistent product protection.

We’re seeking a Security Tech Lead to drive the design and rollout of standardized security solutions and help establish a dedicated Software Security Engineering platform team. In this role, you’ll work closely with the Director of Security Engineering to turn our unified strategy into an actionable engineering roadmap, shaping a strong and cohesive security framework.

What You’ll Do

• Lead the architecture and implementation of shared security primitives across Veeam Data Cloud
• Translate high-level security strategy into a concrete, prioritized engineering roadmap for cloud services and platform capabilities
• Act as a hands-on technical leader – write and review production code, drive design and code reviews, mentorship
• Establish and promote secure-by-default patterns and shared libraries to streamline security across teams 
• Build the foundation for a Software Security Engineering platform to manage shared security services and tools 
• Collaborate with product, platform, SRE, and compliance teams to ensure security solutions are robust and easy to adopt 
• Enhance security posture through automation, guardrails, and policy-as-code 

Technologies You’ll Work With

• Languages & Frameworks: Go, Python, and TypeScript (and related service/API frameworks)
• Cloud & Platform: Modern cloud-native architectures (microservices, event-driven systems, multi-tenant SaaS) using AWS, Azure, and GCP
• Security & Identity: Authentication and authorization services, identity providers, security control planes, guardrails, secure logging
• Tooling & Practices: Code and design review, CI/CD, observability and logging stacks, policy-as-code and security automation

What You’ll Bring

• Strond coding skills (Golang, Python, or TypeScript)
• Extensive experience building distributed, cloud-native systems
• Practical expertise in authentication/authorization, security guardrails, and secure observability for production systems
• Proven technical leadership: architecture, roadmap influence, and mentoring engineers
• Strong product mindset, focusing on platform security that empowers other teams
• Skilled at cross-team collaboration and clear communication of complex topics
• Preference for automation, reusable platforms, and secure-by-default approaches over one-off solutions

Bonus Skills

• Experience building or leading platform and product security teams providing shared services to multiple product teams
• Background in multi-tenant SaaS and large-scale control/data planes
• Familiarity with modern security practices (e.g., zero trust, least privilege, policy-as-code, security service meshes)
• Experience working with regulatory or enterprise security requirements

What You’ll Get 

• 25 vacation days, 4 sick days, 21 paid medical leave days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Premium private medical insurance for employees and dependents
• Daily meal vouchers for restaurants and groceries (180 CZK per working day)
• Flexible cafeteria platform with thousands of lifestyle benefit options
• Multisport Card for gym and wellness, with family add-on options
• Annual public transport reimbursement up to a set limit
• Corporate mobile plan with optional family tariff
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

#LI-TK1

About the Role

Securiti's platform processes billions of data events per day across hundreds of enterprise clouds. As a DevSecOps Engineer, you will build and maintain the invisible infrastructure that makes this scale possible—ensuring developers can ship features daily while maintaining fortress-level security.

You will be responsible for designing self-healing deployment pipelines that turn infrastructure into code, security into automation, and complexity into reliability. Your work ensures that when a customer onboards petabytes of data, our platform scales transparently—without manual intervention.

Responsibilities

• Security-First Infrastructure: Architect and implement infrastructure-as-code using Terraform and CloudFormation, ensuring every deployment follows zero-trust principles and least-privilege access models.

• Kubernetes at Scale: Design and optimize our Kubernetes clusters to handle massive workloads, implementing intelligent autoscaling, pod security policies, and network segmentation that protects sensitive customer data.

• Zero-Downtime Deployments: Build sophisticated CI/CD pipelines using ArgoCD, Spinnaker, and GitOps patterns that enable blue/green and canary deployments—allowing us to ship multiple times per day with zero customer impact.

• Observability Engineering: Implement comprehensive monitoring and alerting using Prometheus, Grafana, and ELK, creating dashboards that surface anomalies before they become incidents.

• Multi-Cloud Orchestration: Manage infrastructure across AWS, Azure, and GCP, building abstraction layers that allow our platform to run anywhere while maintaining consistent security postures.

• Performance Under Fire: Be on-call to diagnose and resolve production issues in real-time, using your deep systems knowledge to troubleshoot complex distributed systems problems across the stack.

• Automation-First Mindset: Write Python and Go tooling that automates repetitive operational tasks, turning hours of manual work into seconds of automated execution.

Requirements

• Experience: 5+ years of software development with deep operational experience in cloud-native environments (AWS, Azure, GCP).

•  Infrastructure as Code Mastery: Expert-level proficiency with Terraform or AWS CloudFormation, with a portfolio of reusable modules and patterns.

• Container Orchestration: Production experience running Kubernetes at scale, including deep knowledge of networking, security contexts, and stateful workloads.

• CI/CD Architecture: Hands-on experience designing GitOps-based deployment pipelines using tools like ArgoCD, Spinnaker, Jenkins, or GitHub Actions.

• Development Skills: Professional coding ability in Python or Golang—you're not just configuring tools, you're building them.

• Database Operations: Working knowledge of SQL (Postgres), NoSQL (MongoDB/Elasticsearch), and Graph databases (Neo4j, Neptune) for operational troubleshooting and performance tuning.

• Linux & Networking Fundamentals: Deep understanding of Linux systems administration, bash scripting, network routing, load balancing, and service mesh architectures.

• Monitoring & Observability: Experience implementing full-stack observability with metrics, logs, and traces using Prometheus, Grafana, ELK, or similar tooling.

Bonus Points

• Security Certifications: AWS Security Specialty, CKS (Certified Kubernetes Security Specialist), or equivalent security-focused credentials.

• Service Mesh Experience: Hands-on work with Istio, Linkerd, or Consul for advanced traffic management and zero-trust networking.

• Chaos Engineering: Experience with fault injection frameworks (Chaos Monkey, Litmus) to build resilient systems.

• GitOps Evangelism: You've championed GitOps practices and trained teams on declarative infrastructure patterns.

• Cost Optimization: Track record of reducing cloud spend through intelligent resource management and architectural improvements.