# Senior Security Engineer (Team Lead)

**Company**: Glia
**Location**: Poland
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/glia/42aa65ae-8e98-4669-9862-50441efaee3d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ec9a2ef6-ac4

## Description

We're looking for a Senior Security Engineer who thinks about security end to end - not one domain deep, but the whole posture: application, infrastructure, supply chain, endpoints, operations, and the compliance surface behind them.

This is a Team Lead hire: we're looking for someone who will lead the DevSec team. You will start as a hands-on individual contributor to learn Glia's systems and security specifics, then step up to lead the team as a player-coach - leading the team's delivery and growth while remaining deeply hands-on, with career progression on the engineering IC track.

**The Ramp-up (First 3 Months)** You will start as a hands-on Senior Security Engineer to build a strong foundation. You will:

- Ship hands-on security work and learn Glia's platform, Glia-specific security challenges, and how the rest of the Platform group operates.

- Co-own the company security roadmap together with our Security Leader, balancing domains by risk.

- Get to know the team, our tooling, and Glia's project delivery methodologies.

**The Team Lead Role (Post Ramp-up)** Once you step up, your time will shift to ~60% leadership and ~40% hands-on work. You will own:

- Delivery & roadmap: own security programs end-to-end - from roadmap shaping and stakeholder alignment through implementation and adoption - prioritising by risk and unblocking the team.

- People & mentorship: run 1:1s, manage performance, and grow the team.

- Hands-on contribution: lead by example - stay close to the technical work and take on high-leverage security engineering yourself.

**The Work:** The role spans the whole security surface, prioritising by risk rather than by specialty:

- Application & product security - threat modelling, secure SDLC, design/code review, supply chain security

- Infrastructure & cloud security - AWS posture, runtime security, IAM; close collaboration with the Infrastructure team

- Security automation & AI - develop and own automation and AI tooling supporting company security goals; secure our AI-assisted development practices and LLM tooling

- Endpoint & corporate security - developer endpoint security (MDM, privilege, software governance), secrets hygiene

- Whole-posture assessment - run framework-based assessments (CIS Controls), identify where attention bears most value, and turn findings into prioritised, engineering-consumable plans

- Compliance interface - connect technical work to SOC 2 / PCI-DSS / ISO 42001 needs

- Mentor engineers, lead blameless post-mortems for security incidents, and present to and align senior management

**Tech Stack You Will Be Working With:**

- Infrastructure: AWS (Terraform, Kubernetes)

- CI/CD: Jenkins, GitHub Actions, ArgoCD

- Vulnerability detection & runtime security: Snyk, Sysdig/Falco

- SSO & MDM: Okta, Jamf

- Coding: Python preferred; our product stack includes Elixir, Ruby, and Golang

- AI-assisted development: Claude Code and agentic tooling are part of everyday engineering at Glia

**Requirements:**

- Credible hands-on experience in at least two security domains (e.g. AppSec + cloud/infra) and literacy across the rest - you think in overall posture and risk, not tools

- You have built or scaled a security program end-to-end (process, tooling, adoption), ideally in a low-structure environment

- Coding and automation ability (Python preferred) and cloud security depth (AWS)

- Experience with AI-assisted development, and with securing it: LLM tooling (e.g. MCP), AI governance awareness

- Leadership readiness with evidence - mentoring, deputising for a lead, or formal lead experience - and the commitment to step up as DevSec Team Lead after ramp-up, owning the team's delivery while staying technical

- An educator and multiplier, not a gatekeeper: you enjoy high-empathy collaboration with developers

- Located in Europe

## Skills

### Required
- Application Security
- Cloud Security
- Infrastructure Security
- Security Automation
- AI-assisted development
- Leadership
- Python
- AWS
- Terraform
- Kubernetes
- Jenkins
- GitHub Actions
- ArgoCD
- Snyk
- Sysdig/Falco
- Okta
- Jamf
- Elixir
- Ruby
- Golang

### Nice to have
- Framework-based posture assessment experience (CIS Controls, NIST CSF, or similar)
- Pentest, audit, and compliance exposure (SOC 2, PCI-DSS, ISO 42001)
- Terraform/Kubernetes; endpoint/MDM and IdP experience

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/glia/42aa65ae-8e98-4669-9862-50441efaee3d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)