Security & Compliance Engineer

Are you the kind of person who is comfortable getting hands-on with technical work - reviewing a firewall ruleset, hardening an endpoint fleet, triaging a SIEM alert - and equally at ease with documenting evidence needed to pass a compliance audit? Do you want the kind of role where security is yours to shape, not just operating? Would you like to cooperate with top professionals in our industry? If your answers are mostly yes, then you should keep reading. At Nomagic, we're on a mission to teach robots the real world. We're now looking for a Security & Compliance Engineer to own security and compliance across the company - from our corporate environment to the edge stations we deploy at customer sites. Offer essentials: Own security and compliance hands-on at a scaling robotics company Work across cloud, edge, and on-prem infrastructure Equity for every employee Relocation package No late evening calls - the entire eng team is based in Europe :) English-speaking environment Hybrid work from Warsaw - you'll be in the office regularly, as the role benefits from presence Here is why we love this job ourselves, and hope you will enjoy it too: We get to be creative We're still pretty small, so everyone has a direct impact on the final result Nothing is written in stone, we can easily change the tools and processes we use (if the requirements change) We take security and compliance seriously as operational reality, not as a checkbox You won't be alone - you'll have a strong DevOps/Infrastructure team for cloud and edge topics, outsourced IT support for day-to-day administration, and security consultants for specialized work The CEO and part of the management are experienced infrastructure engineers who created the foundations of Google Cloud Platform We combine world-class research with top-notch engineering and apply it to solve real problems Some of problems you may try to solve with us : Owning our ISO 27001 and SOC 2 compliance posture day-to-day on Vanta - evidence, controls, audits, and closing gaps as we grow Co-create policy for AI tooling usage - be at the forefront of how AI can boost productivity at Nomagic, while applying best security practices around evaluation, access, and data handling Defining the security standards for our endpoints, identity, and network - and verifying that our outsourced IT provider implements them correctly Running the third-party risk process - assessing vendor security posture and handling customer security questionnaires Monitoring and responding to security events - SIEM, alert triage, investigation, and improving detection over time Working with the DevOps/Infrastructure team on security topics that span cloud, edge, and OT environments Skills we'd like you to have: 5+ years of hands-on experience in information security, IT security, or a similar role Practical understanding of endpoint and identity security - MDM, SSO, SAML, access control models Solid understanding of network security architecture - segmentation, trust boundaries, and secure remote access Hands-on experience with a GRC framework (ISO 27001, SOC 2, or similar), including third-party risk assessment and security questionnaires Comfortable writing and reviewing security policies Scripting ability for automation - Python, Bash, PowerShell, or similar Fluent communication in English Nice to have: Experience with Vanta or a similar GRC platform (Drata, Tugboat Logic) - matches our current stack Familiarity with SIEM tooling, especially Wazuh - matches our current stack Exposure to OT, industrial, or edge/hardware environments Cloud security experience (GCP preferred) Background in a tech scaleup What should you expect once you apply? 30 minutes call with a Recruiter 45 minutes Hiring Manager interview 60 minutes Technical Interview Onsites - half a day of interviews & discussions at the office Important: Feedback after completing the recruitment process. See a short sneak peek of our product here: #J-18808-Ljbffr No Magic