monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition.

We fully embrace the AI revolution and we equip you with AI-powered IDEs, customizable agent rules, prompt engineering tools to streamline your workflow and AI-infused CI/CD pipelines designed to boost speed and reliability. You'll also tap into AI-driven insights, helping you make smarter decisions, faster.

We’re looking for a Senior DevSecOps Engineer to join our team, where you’ll have the chance to grow your career while solving impactful, high-scale problems. This role is centered on securing our cloud infrastructure, with a strong focus on Kubernetes, in close collaboration with the broader Security department. The ideal candidate will play a crucial role in managing our Cloud Security Posture using CNAPP/CSPM tools such as Wiz, and in hardening our cloud-native environments, while also supporting our AppSec team in securing CI/CD pipelines. The role also involves managing Web Application Firewalls in collaboration with our Advanced Threat Detection team, participating in security incident response, conducting infrastructure audits, and managing our Just-In-Time (JIT) access system. A person in this role will be part of the team serving as a key point of communication and synchronization between the several groups of stakeholders (Infrastructure, Development, Security), fostering a culture of security awareness and collaboration across all teams.

The role is based in our Warsaw office - established in 2022, it is a growing hub for engineers who love solving impactful problems. Teams here work on a broad range of challenges that push the boundaries of our products and infrastructure. Dive into these blog posts to discover the kind of work that could be waiting for you:

Detecting traffic anomalies at scale

Managing Trace Volume at monday.com

How we mastered Content Security Policy

Guarding the herd – managing database servers at scale

About The Role

Cloud & Kubernetes Security:

Manage our Cloud Security Posture using CNAPP/CSPM tools such as Wiz, AWS GuardDuty, and DataDog.

Harden and continuously monitor our cloud-native environments, with particular focus on Kubernetes.

Manage security cloud configuration with tools like Terraform and CDK.

Collaborate with cloud operations teams to identify and remediate security risks.

Web Application Firewalls:

Configure and manage WAFs (such as Cloudflare) in collaboration with our Advanced Threat Detection team.

Monitor and update WAF rules to respond to new vulnerabilities and attack vectors.

Conduct regular security assessments and audits of WAF configurations.

Incident Response & Infrastructure Audits:

Participate in security incident response.

Conduct regular infrastructure security audits.

Identify and remediate security threats, collaborating with other teams to mitigate risks.

Access Management:

Manage our Just-In-Time (JIT) access system.

Manage dozens of cloud accounts and design access roles (IAM) across the organization.

Ensure secure access to resources such as Kubernetes clusters, databases, cloud resources, and virtual machines.

Security Self Service & Tooling:

Develop security tools within the organization's internal developer platform (IDP).

Test and run PoCs of new security tools to increase efficiency and foster a Secure by Design culture.

Provide support to our AppSec team in securing CI/CD pipelines.

Your Experience & Skills

At least 5 years of experience as a Software Engineer and a minimum of 3 years as a DevOps Engineer.

Passion for keeping systems secure.

Proficiency in any of languages Python/Go/Typescript.

Experience with Kubernetes.

Strong understanding of operating systems and networking.

Understanding of IAM and access management concepts (e.g. Just-In-Time access, role design).