182 remote cybersecurity roles open to candidates in Poland, all at fully remote, VC-backed startups. Matcha reads every posting daily and emails you only the ones that fit.
Describe your next role, cut the noise
182 open roles · 80% not on LinkedIn
Fintech empowering consumers with POS financing and digital payments.
Own and build the security platform for a fintech app: services, event bus, and CI security gates; on-call; 6+ years, Go, Python, Kubernetes, AWS, event-driven systems, CI/CD tooling, web app security, SAST/SCA/secret scanning, AI-assisted workflows; bonus: fintech, PCI DSS, SOC 2
Remote anywhere
Fintech empowering consumers with POS financing and digital payments.
Own and build the security platform for a fintech product: event-driven security services, CI security gates, and agentic triage workflows; on-call; 6+ years, Go, Python, AWS, Kubernetes, NATS/Kafka, GitLab CI, web app security, SAST/SCA/secret scanning, AI-assisted engineering; bonus: fintech, PCI DSS, SOC 2, supply-chain security
Remote anywhere
Open-source BI tools simplifying enterprise data measurement, analysis, sharing.
Own offensive product security and secure-by-default improvements for BI software; must find/exploit app vulns via source analysis, assess runtime behavior, implement fixes; skills: authn/authz, injection, untrusted data, strong engineering, Clojure or learn; Series B, equity, async-first
Remote anywhere
Award-winning, simple money management solutions for small businesses.
Own application security for mobile-money/fintech systems, including AI agent guardrails and API/database security; remote only within UTC -5 to +4; 7-8 years total, 3-5 in security, strong Python, fluent English; small 4-person security team, equity
Remote anywhere between UTC -5 and UTC +4
Production-ready AI for regulated workflows, with governance, traceability, explainability.
Own Azure cloud infrastructure for enterprise MCP connectivity and Microsoft Foundry model access; 7–10+ years; Azure APIM, Entra ID, VNets/Private Endpoints, Key Vault, Terraform/Bicep, Azure DevOps or GitHub Actions, Azure Monitor, Application Insights, KQL; bonus: financial services, Azure OpenAI/Foundry, certifications, AKS/Docker; 22-week two-phase programme
Remote policy unclear
Protect endpoints, empower analysts, overcome threats.
Own MSSP/channel partner revenue growth for a cybersecurity software platform; based in Paris, regular travel, fluent French and English; ~5 years in channel/account management, indirect sales, partner ecosystems, cybersecurity/software vendor experience, KPI/Salesforce
Paris-based with work-from-home flexibility; France only
Global stablecoin-native infrastructure enabling cross-border payments, issuing, and API access.
Own technical direction and hands-on delivery for shared security and identity platforms in regulated fintech; 8–10+ years backend/platform, 2+ years tech leadership, auth/authz, OAuth2/OIDC, AWS, CI/CD, IaC, relational DBs, auditability; bonus: fintech/payments/crypto, security certs
Remote only from Bulgaria, Poland, Romania, Malaysia, or the Philippines
Fintech for stablecoins and Solana, with developer platform Grid.
Own product and infrastructure security for stablecoin/fintech products and Solana systems; 8+ years; threat modeling, architecture review, vuln management, CI/CD scanning, IAM, secrets, network/container security, TypeScript/Rust/Go/Python; bonus: Solana Rust/Anchor, audit firm, HSMs/MPC/PKI, web/mobile offensive testing, AI red teaming, SOC 2; equity
Remote North America or Europe
People and Company Intelligence
Own IT/security operations for a remote workforce; 3-5 years managing IT/security/technical ops teams, 3+ years in fully remote environments, AWS IAM/CloudTrail/Inspector/Organizations+SCP, SSO/Okta, Vanta, Python/Bash; bonus: Tailscale, SentinelOne, 1Password, Pulumi/Terraform, Datadog; manages 1 report; profitable, growing; stock
Remote anywhere
AI marketing platform helping SMEs create and promote high-performing content.
Own company-wide product and infrastructure security for an AI ads platform; fluent Ukrainian, B2+ English; 7+ years engineering, 3+ years security role, backend in Node/JS/TS, Java or C#/.NET, DevOps/cloud, incident response, AWS cert, SOC 2/ISO 27001; profitable, high-growth
Remote anywhere
AI marketing platform helping SMEs create and promote high-performing content.
Own vulnerability remediation and incident response for an AI ads platform’s product and AWS infrastructure; fluent Ukrainian, English B2+; 5+ years engineering, 2+ years security, backend in Node.js/JavaScript/TypeScript, Java, C#/.NET, Go, or Rust, AWS; bonus: security certs, SOC 2/ISO 27001/CASA, GDPR/CCPA
Remote anywhere
Global cross-border crypto venture fund from day one.
Matched into portfolio security engineering roles across crypto infrastructure; bonus: crypto/fintech, blockchain security, cryptographic signing, SOC 2/ISO 27001, founding security experience; spans early-stage to founding roles
Remote worldwide across portfolio companies; remote, hybrid, and in-person opportunities globally
Own product and protocol security for Solana infrastructure and user-facing crypto products; 5+ years, software engineering background, product/app security, threat modeling, secure design/code review, vuln testing, Rust/Go/C++/Python; bonus: smart contracts, Solana/SVM, onchain monitoring, HSMs, fuzzing/formal methods; remote-first, ~50-person team
Remote US or Europe
AI-native AppSec platform enabling scalable, frictionless security for developers.
Own security operations across cloud infrastructure, product, compliance, and customer-facing security for an AppSec platform; hands-on security ops, cloud security, vulnerability management, incident response, SIEM, WAF, CSPM, IAM, SOC 2, ISO 27001; lead role
Remote Poland only
Blockchain security leader with open-source libraries and development platform.
Own smart-contract security research, audits, design reviews, and co-creating protocol contracts for web3/onchain finance; advanced English; Solidity, Ethereum/EVM, smart-contract design/development, AI-native workflows/tooling; bonus: non-EVM chains, formal verification/fuzzing, appsec, audit contests, public research.
Remote anywhere
Insurtech platform connecting independent agents with 100+ carriers.
Own cloud security for a cloud-native insurance marketplace; based in Poland, occasional afternoon CET meetings; 6+ years, AWS, Terraform, Kubernetes/ECS, coding in Python/TypeScript/Go, English and Polish C1; first dedicated cloud security engineer, builds program from scratch, SOC 2/finserv context
Remote Poland only
Fintech for stablecoins and Solana, with developer platform Grid.
Own identity and endpoint security for stablecoin fintech products; must manage SSO/MFA/access policies, MDM/EDR, incident response, vendor/integration risk, Python or Bash; bonus: blockchain/Web3 threats, cloud security, SIEM/detection engineering, AI security ops; small team, works closely with Head of Security, equity.
Remote in North America or Europe
Network abuse management and threat intelligence for telcos, blocking threats fast.
Lead a 10-person engineering/SRE team and own platform architecture for network security products; fluent English; hands-on coding, prior Head/Director/senior technical lead experience, startup/scale-up team building, product partnership, AI-assisted development; reports to CEO, leadership team, ESOP
Remote in EU or UK; UK or an EU country only
Nord Security Partner page: cybersecurity suite and insights for growth.
Own application security for a consumer VPN product across mobile, desktop, and browser extensions; must have app security assessment experience, VPN/networking knowledge, secure coding, Linux/Android/iOS/macOS/Windows security, stakeholder scoping and remediation
Remote Poland only
Complete platform for seamless travel business management and growth.
Own infrastructure vulnerability management, cloud posture, detection/logging, incident response, and AI-tooling security for a travel/payments platform; 8+ years; AWS, Kubernetes, IaC, SIEM/MDR, vuln management at scale, SOC 2/PCI DSS; bonus: fintech, DFIR, GDPR/CRA, ISO27001.
Remote in Bulgaria, Ireland, Italy, Lithuania, Poland, Portugal, or Spain only
Automated, compliant onboarding for enterprises; scalable and cost-efficient.
Own and harden identity-platform infrastructure and security; automate SOC 2/ISO 27001 controls; deep AWS or comparable, Kubernetes, IaC, CI/CD, observability, security engineering, enterprise IT; remote-first startup, infrastructure treated as product.
Remote Europe only; Amsterdam office listed.
Carrier-edge GPU platform enabling low-latency sovereign AI inference.
Own zero-trust and platform security for a GPU cloud platform serving multi-tenant AI workloads; 7+ years, cloud/infrastructure security, Kubernetes, IAM/PKI, SIEM/telemetry, security automation, datacenter/network security; scale-up
Remote Europe only
Enterprise event platform enabling scalable hybrid events with CRM insights.
IT security role reporting to the Chief Security and Trust Officer; owns identity/access lifecycle, endpoint management for a macOS fleet, security controls/permission models across about a dozen SaaS tools, and internal tooling for access reporting, cross-tool investigation, and a tuned detection layer; role is measured on risk reduction rather than IT service; preventive-first but participates in incident response outside office hours when needed, though not a formal on-call rotation; 1-month goals include full tool/access inventory and independently running onboarding/offboarding/access requests; 3-month goals include assessing and prioritizing SaaS security settings and planning endpoint management/protection rollout; 6-month goals include fleet-wide endpoint protection, unified access review/evidence export, and a usable security dashboard for investigations; must span identity, endpoints, tool configuration and logging; specifically needs Google Workspace identity administration including SSO/SAML, groups/org units, admin roles, context-aware access, audit logs and alerts; also needs API fundamentals including REST, HTTP methods/status codes, API keys, and OAuth 2.0
Remote Europe only
Boosting offensive security with AI
individual contributor GRC/security analyst role supporting customer and prospect security reviews, contract review coordination with legal, vendor/third-party risk, compliance alert resolution in Vanta, risk frameworks/registers/policies, remediation tracking, audits, and compliance initiatives across SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001; cross-functional partner to IT, Security, Engineering, Legal, Sales, and Customer teams; scope may expand as risk/compliance matures; must have 7+ years in risk/compliance/security assurance or related roles plus prior hands-on technical experience in engineering, IT, or operational security; must have direct experience with technical security questionnaires, customer risk assessments, vendor risk assessments, and frameworks including NIST, GDPR, and HIPAA; bonus: SaaS or security company experience, GDPR subject access requests, CRISC/CISSP, cloud security best practices
Remote UK/EU only
Empowering developers to build on Bitcoin, growing Rootstock and decentralized tech.
Secures Bitcoin-backed DeFi infrastructure; reviews source code, smart contracts, and protocol changes; threat modeling and architecture reviews with development teams; owns bug bounty triage/validation and coordinates external audits through remediation; builds security automation including AI-assisted code review, scanning, findings triage, CI security checks, monitoring alerts, and hardening; researches EVM, bridge, and p2p attack techniques and supports application-layer incident investigations; requires 3+ years in application/security engineering, secure code review in Java plus one of TypeScript/JavaScript, Python, Go, or Rust, blockchain security experience in Solidity/EVM or protocol/node security, security automation experience, and fluent English; bonus: bug bounty/disclosure programs, network or consensus attack mitigation, offensive security background, public security research, C/C++, fuzzing
Remote within UTC-3 to UTC+2 time zones; effectively Europe through Argentina-aligned LATAM time zones
Blockchain security leader with open-source libraries and development platform.
Own and mature the company's Information Security, Privacy & IT program end-to-end under Legal; manage the team and department OKRs, risk posture, multi-year roadmap, and technology budget/procurement; lead AI security and governance for internal AI adoption including agentic infrastructure, model-provider/vendor diligence, retention/training-use commitments, DPAs, subprocessors, and EU AI Act readiness; own audit/certification/attestation strategy and execution including SOC 2 Type 2, ISO/IEC 27001, pen testing, internal audits, vendor risk, and customer security diligence with regulated financial institutions; own privacy/data governance including data mapping, classification, records of processing, GDPR and CCPA/CPRA compliance, and privacy-by-design reviews; own incident response, breach notification with Legal, bug bounty programs, and partner with development teams on SDLC security; oversee IAM, provisioning, endpoint/MDM, physical security, disaster recovery, business continuity, backups, and automation/AI-enabled IT ops; requires 10+ years in Security and IT, including 3+ years leading IT Security and GRC in a high-growth tech company, with executive/board-facing ownership of a security program; must have experience securing or governing AI/LLM-enabled products or enterprise AI adoption; bonus: 5+ years in blockchain or fintech serving enterprise clients
Remote anywhere
AI-first remote care platform for exercise, telehealth, and patient engagement.
B2B contractor role focused on security engineering + SRE for digital health infrastructure; owns edge security, cloud security posture, production data layer, and observability; hands-on role covering Envoy edge, WAF/rate limiting/bot management, abuse detection, AWS hardening, IAM/least privilege, threat detection, runtime monitoring on EKS, secrets/certificates/token lifecycle, and technical evidence for ISO 27001 audits, penetration tests, and enterprise security reviews; runs multi-region PostgreSQL/RDS, search infrastructure and vector search, plus MongoDB and ElastiCache; owns Grafana/Loki/Prometheus, Sentry, PagerDuty, alerting quality, and log/metric flows; must have 5+ years in infrastructure/SRE/security engineering, strong AWS, edge/WAF/reverse proxy experience, production Kubernetes/EKS, Terraform, PostgreSQL upgrades/performance, practical observability, and professional English; bonus: Typesense/Elasticsearch/OpenSearch/vector search, anti-scraping, technical audit support, regulated-domain experience, Polish; 24/7 PagerDuty rotation participation by agreement and separately compensated; async-heavy, autonomous environment with broad scope
Fully remote from Poland only
Autonomously discovers and remediates vulnerabilities across entire software stack.
forward-deployed role in autonomous vulnerability remediation/security; deploys, configures, and integrates security platforms into sensitive government, defense, and high-security enterprise environments; reads and writes production code and works directly in customer/platform codebases for vulnerability identification, patch verification, and custom tooling integrations; bridges field deployments with engineering/AI teams to turn operational edge cases into platform capabilities; works with complex IT/OT/VPC architectures, air-gapped networks, Linux kernel internals, and containerized deployments; must hold active UK SC/DV, EU Secret, NATO Secret, or equivalent national security clearance; must understand vulnerability classes such as memory safety, logic flaws, web/network attack surfaces, and zero-day dynamics
Remote Europe and UK; deployments across UK and EU
Unified payments and commerce platform empowering merchants to grow.
Own detection and response work end-to-end; build, tune, and maintain SIEM and AWS detections; triage, investigate, escalate, and resolve security incidents; build runbooks and automation for response; support audits and keep owned controls audit-ready; maintain detection/tooling infrastructure; join incident-response/monitoring on-call rotation; must have SIEM detection experience, AWS cloud detection/response, Python, infrastructure-as-code, MITRE ATT&CK, and hands-on incident response; bonus: SOAR/no-code automation, compliance frameworks, regulated-industry background
Remote only from United Kingdom, Hungary, Ireland, Poland, Portugal, Romania, or South Africa
Nord Security Partner page: cybersecurity suite and insights for growth.
Focus on iOS application security for consumer/mobile products; conduct design/code/library reviews, vulnerability assessments, static/dynamic analysis, runtime instrumentation, penetration testing, and MASVS-aligned audits; build security scripts, automation tools, and instrumentation harnesses; partner with development teams on secure architecture and controls; deliver security training and identify internal product security gaps; must have hands-on iOS appsec experience, manual code audit ability, Swift/Objective-C proficiency, OWASP MASVS/MASTG knowledge, iOS security model expertise, dynamic instrumentation and reverse-engineering/debugging tooling, bypass testing for certificate pinning/jailbreak detection/anti-tampering, and networking/protocol analysis; bonus: Android app security, fuzzing, public CVEs/bug bounties/open-source/blogs
Remote Poland only
AI infrastructure for travel, enabling personalized booking without re-platforming.
Own and build the company’s security function while remaining hands-on; broad scope across application security, detection/response, cloud/platform hardening, API security, AI/LLM security, identity/company security, threat modeling, SOC 2 program, and future security hiring; secures APIs, backend services, internal tooling, enterprise SaaS/API products, client console, integrations, MCP server, and data-ingestion/LLM systems; enterprise commitments go live from the start of 2027; must have 5+ years of hands-on security across multiple disciplines; must have depth in appsec, authn/authz, cloud security, incident investigation, detection/alerting, threat modeling, and be comfortable working in code; must be able to use Claude Code with specific examples; bonus: prior Go, AI/LLM security, early security hire experience, leadership/mentoring, security tooling automation, MDM/IdP admin, compliance automation tools, GDPR/travel/GDS exposure, German
Remote EU or Africa time zones, within ±3 hours of CET
Postgres development platform offering database, authentication, APIs, and real-time subscriptions.
Secures infrastructure, cloud platform, Kubernetes environments, and containerized workloads; partners with infrastructure, platform, SRE, product engineering, and technical leadership; focuses on threat modeling, architecture reviews, technical risk assessments, AWS security posture, Kubernetes/container hardening, Linux isolation risks, and building automation, guardrails, secure defaults, detection, and review frameworks; requires senior-level experience in platform/cloud/infrastructure/container security or security engineering; strong hands-on AWS, Kubernetes, containers, and Linux security fundamentals; experience in large cloud environments, multi-cluster Kubernetes, developer platforms, SaaS platforms, or high-scale infrastructure teams; async written communication emphasized
Remote anywhere
Seamless cross-border crypto payments with fiat settlements and compliance.
Candidates must have at least 3 years of experience in Information Security, GRC, or Risk Management with practical knowledge of security frameworks. Strong communication skills and proficiency with GRC tools like Vanta or Drata are required, along with relevant certifications such as CISSP or CISM.
Remote Europe only
Europe e-commerce gaming marketplace for gamers, publishers, sellers, affiliates.
broad security-focused backend role spanning hands-on coding, incident response, threat hunting, bug bounty triage/remediation, anomaly investigation, access governance, and writing security policies/documentation; security team role working closely with backend engineering and other departments; first months focused on learning services/systems to secure them effectively; must: solid PHP, security knowledge or demonstrated security interest, background in IT/backend engineering or related technical field; bonus: monitoring/application monitoring experience, familiarity with OWASP Top 10; employee stock options mentioned
Remote Europe or US
Scaling Ethereum via zkSync L2 to expand global freedom.
Candidates must have a proven record in security engineering or research with experience in threat modeling and vulnerability analysis. Proficiency in strongly typed languages like C++, Go, or Scala is required, along with deep knowledge of algorithms and distributed systems.
Remote anywhere
Pencil: Enterprise AI marketing OS unifying models, governance, workflows.
Candidates should have a background in desktop support, IT systems administration, or technical operations with hands-on experience in endpoint management and cloud basics. A security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, or Microsoft SC-900 is required or expected through self-directed learning.
Remote across EMEA; work from anywhere in your home country. UK employees can access the London office.
AI-powered CRM for the next era of companies.
Requires deep expertise in application security within high-scale, multi-tenant SaaS environments. Candidates must possess strong incident response skills and a proven track record of recruiting and mentoring security teams.
Remote Europe only: candidates must currently live in Poland, Germany, Portugal, or Ireland.
Decentralized, remote-first blockchain team improving Web3 developer experience worldwide.
Candidates must have experience with secure coding practices, memory safety, and code auditing within decentralized systems. A strong background in vulnerability analysis and an offensive security mindset are essential for this role.
Remote-first global role; can work from anywhere. Contractor via UK entity; background check required.
AI-driven mobile security leader protecting apps and devices.
Candidates must hold a bachelor's degree in computer science or a related field with 1-5+ years of experience in enterprise software support. Strong technical proficiency in SQL, scripting languages, and mobile device management solutions is required.
Remote in India. Customer-support engineering for enterprise mobile security; no other region restrictions stated.
Automates 90% of SME security compliance and ISMS.
Candidates must have 7+ years of hands-on information security and GRC experience in B2B SaaS, including leading at least 5 successful ISO 27001 certification projects. Strong project management skills, fluent English, and 2+ years of people management experience are also required.
Remote in Europe (EU) only; must be within EU time zones, ~GMT+1 ±2 hours from Germany; C1/C2 English required.
Compliant-first B2B data and sales intelligence for European revenue teams.
Candidates should have 1-2 years of experience in security, GRC, or IT audit with a working knowledge of ISO 27001 and SOC 2. Strong communication skills and a detail-oriented, process-driven mindset are essential for success in this role.
Automates offensive security lifecycle: attack surface management, AI pentesting, smart DAST.
Candidates must have proven experience in cybersecurity sales, specifically closing complex enterprise deals with long sales cycles. You must be fluent in English and either native/fluent in Swedish or possess deep UK market expertise, with the legal right to work in those regions.
Remote-first in Sweden and England; eligible to work there required; no visa sponsorship.
Open-source vector search engine powering AI apps with embeddings.
The role requires 3+ years of experience in security engineering or vulnerability management and the ability to read and navigate codebases in Rust, Go, or Python. Candidates must have practical knowledge of cloud and container security, specifically AWS and Kubernetes, and experience with CI/CD pipelines.
Remote Germany, France, Netherlands, Spain. Mid-level security engineering; low on-call with occasional high-severity availability.
Original Zcash developers form ZODL and Zodl wallet.
Candidates should have experience with open-source software development and overseeing the security aspects of protocol implementation. Strong leadership, communication skills, and the ability to make informed decisions under pressure are essential for this management role.
Remote-first; can work from US, Chile, Czech Republic, France, Slovakia, UK, and New Zealand. No other restrictions stated.
API-first B2B payments platform with embedded, white-label Visa cards.
The role requires hands-on experience in DevSecOps or cloud security within AWS environments, including proficiency in Terraform and container security. You must also possess strong leadership skills and a working knowledge of compliance frameworks like PCI DSS and SOC 2.
EU/UK remote allowed; role is not open outside the EU or UK.
Open-source Python SDK and FastAPI server for 100+ LLM APIs.
Candidates should be security generalists with deep expertise in auditing Python code and securing cloud-native environments. A background in CTFs, vulnerability research, and familiarity with LLM-specific attack surfaces is highly desired.
Remote location not specified; open to worldwide applicants. No region-based restrictions mentioned.
AI-powered banking interactions platform boosting efficiency for community banks.
The role requires credible hands-on experience in at least two security domains and the ability to scale security programs in a low-structure environment. Candidates must possess strong coding and automation skills, specifically in Python, along with deep AWS cloud security knowledge.
Remote in Europe; role located in Europe (remote-first with fully remote rituals).
AI-powered defense platform delivering targeting, planning, and deterrence at edge.
Requires 7+ years of software engineering experience with strong backend expertise in languages like Python or Java and proficiency in full-stack development using React and Node.js. Must have deep knowledge of identity and authentication protocols such as OAuth 2.0, OIDC, and SAML.
Remote-friendly; no stated regional restrictions. Travel may be required for clearance-related user visits.
Cloud-native payments infrastructure connecting banks via secure managed real-time API.
The role requires deep expertise in building distributed systems using Go and familiarity with cloud-native technologies like Kubernetes. Candidates should have a strong background in security-focused platform development and a collaborative approach to engineering.
100% remote. Contractors must be based in Austria, Bulgaria, Croatia, Cyprus, Estonia, Greece, Hungary, Italy, Latvia, Lithuania, Malta, Romania, Slovakia, Slovenia.
Cloud-native, fully managed payments infrastructure as a service for banks.
Requires deep expertise in building distributed systems and proficiency in the Go programming language. Candidates should be familiar with cloud technologies, containerization, and software engineering best practices.
Remote from EU countries listed; first on-site day in the office to collect equipment.
+132 more cybersecurity roles in Poland
Tell us what you want. Get them in your inbox — no scrolling, no noise.
Describe your next role, cut the noise
A zero-noise alternative to job boards for remote startup jobs. Describe your next role once in plain language; Matcha reads every job description daily and emails you only the roles that actually fit. No UI to check, no notifications, no noise.
Matcha is a zero-noise alternative to job boards for remote startup jobs. Instead of scrolling through hundreds of irrelevant postings, you describe your next role once and Matcha reads every job description daily to surface only the roles that actually fit. Matches arrive in a single email, as soon as a relevant role is posted. No UI to check, no notifications, no noise. Because Matcha reads full job descriptions in plain language, there is no limit to what you can filter by: not just the usual dropdowns, but anything you can put into words.
Matcha surfaces fully remote jobs at startups from seed to series A, series B, etc. typically backed by top-tier VCs like a16z, Index Ventures, Y Combinator, Google Ventures, Sequoia, Accel, Khosla Ventures, etc. Roles span software engineering, design, marketing, sales, and more. Open to candidates in Europe, the US, Canada, the UK, Brazil, Latam, APAC, and worldwide.
Describe your next role, cut the noise
