Staff Security Engineer

Job description

**Location:** **[Poland]** **We Are:** RTB House is a next-generation performance demand-side platform (DSP) that uses proprietary Deep Learning AI algorithms to help brands grow. The company is the market leader in driving performance using Deep Learning across the entire purchase funnel. Founded in 2012, and now operating in 90+ markets, RTB House has always been private-by-design. It embraces first-party advertising and a relentless approach to innovation. RTB House offers end-to-end Deep Learning-powered AdTech products and solutions to maximize conversion, drive new customer acquisition, create engagement, and fuel long-term demand for a global base of clients. **About the role** As a Staff Security Engineer, you will play a key technical role in improving the security of RTB House systems, infrastructure, and software development practices. You will work across engineering teams, including Software Engineering, Platform, Infrastructure, DevOps, Cloud, and our Security Operations Center. Your goal will be to identify systemic security risks, design practical solutions, and help engineering teams build secure systems by default. This is a senior individual contributor role with broad technical influence, reporting directly to the VP of Engineering. You will not be limited to operating security tools or responding to individual vulnerabilities. You will look at security across the organization, identify areas where we can improve, define technical security standards and architecture, and work directly with engineering teams to implement them. You will also act as a bridge between Security Operations and Engineering. Insights from incidents, vulnerabilities, threat intelligence, and security assessments should result in concrete improvements to architecture, tooling, development practices, and technical controls. We are looking for someone who is comfortable going deep technically while also being able to influence engineering decisions across multiple teams. **You Will:** - Identify systemic security risks across applications, on-prem infrastructure, cloud environments, internal platforms, and software development processes. - Perform security architecture reviews for existing and new systems. - Work directly with engineering teams to identify security weaknesses early in the software development lifecycle and design practical ways to address them. - Partner with our SOC to improve detection capabilities, analyze attack patterns and incidents, and translate findings into better detection rules, security controls, and long term architectural improvements. - Design and help implement security controls, tools, automation, and services that can be reused across engineering teams. - Define and evolve technical security standards, engineering guidelines, reference architectures, and security best practices. - Review complex technical designs and provide actionable security recommendations without unnecessarily blocking engineering teams. **Desired Experience:** - 8+ years of professional experience in security engineering, software engineering, infrastructure security, product security, or closely related technical roles. - Strong hands-on experience in security engineering and designing security controls for production environments. - Experience with large scale distributed systems and high throughput environments. - **Polish and English language is a must (min.B2/C1)** - Experience performing security architecture reviews, threat modeling, technical security assessments, or similar security design activities. - Strong understanding of application security, infrastructure security, network security, authentication, authorization, and common attack techniques. - Experience securing cloud and on premise environments. - Good understanding of Linux, containers, Kubernetes, networking, and modern distributed systems. - Programming or scripting experience in at least one general purpose language such as Python, Go, Java, C++, or similar. **Selected Technologies:** - Google Cloud Platform & On-Prem solutions - Kubernetes, GCP serverless services - Argo CD & Argo Workflows - PostgreSQL, Google Cloud SQL - GitHub, Gerrit - Terraform, Terragrunt - GitHub Actions, Jenkins **We Offer:** - Cutting-edge Technology: Engage with the latest technologies on large-scale, dynamic projects - Wellbeing: extremely flexible cooperation conditions - you work when it is convenient for you and devote as much time as you can; you can work fully remotely - Purpose-Driven Work: being at the heart of the system, your growing knowledge and competencies will be used in practical applications directly connected to business results **Apply now!** You don't need to tick every box to apply. If you are passionate about digital marketing, send us your CV, and we'll review it.