Security SME - Cloud Security Analyst

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe. Do you want to work on securing cloud environments in complex global architectures? This role might be exactly what you’re looking for! Sounds like your kind of challenge? What you get in return Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.) Hybrid work setup – remote days available depending on the client’s arrangements (6 days per month from Cracow office) Collaborative team culture – work alongside experienced professionals eager to share knowledge Continuous development – access to training platforms and growth opportunities Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more High quality equipment – laptop and essential software provided
Requirements:
5+ years of experience as a technical analyst in cybersecurity, focusing on security and compliance platforms (SaaS/On-prem). Hands-on knowledge of CNAPP, APSM, CSPM solutions , vulnerability scanning, compliance, and inventory tools. Proven experience with Agile/Scrum , including writing epics, features, and user stories. Familiarity with API integrations, microservices, Kubernetes , AWS/GCP cloud platforms, and DevOps processes. Preferred: Knowledge of security standards (PCI-DSS, CIS benchmarks) and relevant certifications (Public Cloud, Security Analyst). Soft Skills Ability to thrive in a fast-paced environment with shifting priorities. Strong communication skills in English (both verbal and written). Proactive, collaborative, and self-driven mindset. Strong stakeholder management and problem-solving skills. Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Must have: Cybersecurity, Security, SaaS, User stories, API, Microservices, Kubernetes, AWS, GCP, Cloud platform, DevOps, CIS, Public cloud, Communication skills, Stakeholder management
Daily tasks: - Gather and analyze requirements by collaborating with architects, cloud and container engineers, capability leads, and control owners.
– Define and prioritize epics within Agile sprints, providing clear goals and sufficient technical details for execution.
– Maintain traceability between business requirements, technical specifications, and implemented features.
– Conduct workshops and demos with stakeholders to validate design approaches and agree on implementation details.
– Create acceptance criteria and map necessary API integrations with downstream systems (e.g., reporting tools, data lakes).
– Support CNAPP adoption by providing guidance and performing security and threat assessments for cloud-native platforms.