Cloud Security Engineer

We’re looking for a Cloud Security Engineer who will help us secure our cloud environment and enable engineering teams to adopt cloud technologies safely at scale.

Cloud Security Engineer

About position

This role sits at the intersection of cloud security, security governance, and secure AI adoption. You’ll work closely with engineering and security teams to ensure our cloud environment is resilient, observable, and protected against modern threats — with a strong focus on identity security.

As AI becomes an increasingly important part of how we work, you'll also help define practical guidance for AI tools, agents, integrations, and automation, ensuring they are used securely and effectively across the company.

  • Type of employment Full time
  • Start Date January 2027
  • Form Hybrid

What We Offer.

  • No corporate hassle, no burnouts: We’re a mid-sized company with 5 divisions. Collaborative culture, genuine flexibility, and sustainable pace.
  • Flexible work setup: Wednesdays and Thursdays in the office; the rest is up to you. Work in a way that suits you.
  • Supportive environment: From day one you’ll have a buddy to help you settle in, and a collaborative team. 
  • Growth: Cross-team collaboration, and no-meeting Fridays focused on your growth.  
  • Benefits: Multisport card, extra vacation, and more.
  • Do you want to know more? Contact us and let's meet in our offices. If it works out for both sides, we'll be happy to welcome you to our team, based in both Brno and Prague.

What You'll Do

  • Review and improve cloud security posture and configurations. Consult team with design decisions.

  • Design and implement cloud identity and access security controls and best practices.

  • Participate in incident response, from detection through remediation.

  • Actively identify and remediate cloud security configuration issues.

  • Collaborate with developers and security team to embed security into day‑to‑day operations.

  • Ensure secure adoption of AI tools across Kentico.

Is it you?

Cloud Security

  • Strong knowledge of cloud security threats, especially:

    • Identity‑based attacks.

    • Misconfigurations and insecure defaults.

  • Experience with:

    • Hardening cloud resources.

    • Auditing security posture across cloud environments.

    • Improving detection and preventive controls.

Identity management

  • Solid experience with cloud platforms (Azure preferred).

  • Strong understanding of Identity and Access Management (IAM) concepts, including:

    • Least‑privilege access models.

    • User‑ and system‑assigned managed identities.

    • Privileged Identity Management (PIM).

    • Handling and protecting sensitive permissions.

Secure technology & AI adoption

  • Experience with modern AI platforms and services such as Microsoft Copilot, Azure Foundry, Anthropic Platform or similar.

  • Understanding of the security implications of AI agents, MCP, tools, skills, and agent orchestration concepts.

  • Familiarity with risks such as prompt injection, data leakage,  excessive permissions, agent authorization and cross-system trust boundaries.

  • Experience creating practical guidance and standards for safe technology adoption.

Use your Friday Well

We dedicate 20% of our time to innovation and learning. That's why Fridays are meeting-free. Use the time to explore, experiment, and bring new ideas to life, aligned with your role and our strategy. 

Innovation Time

You get to plan one-fifth of your work time to do the things you want to focus on – projects or further education.

Multisport Card

Go to a gym every day, if you feel like it – at our expense.

Extra vacation & Unlimited sick days

There's time for work and time to switch off. Whether you need to rest, recover, or finally take “that trip.” Time off is a must-have. 

Paid Paternity Leave

We give fathers of new-born babies two weeks' paid holiday.

Comfortable Working Environment

Dogs, fish … we even have our own beer tap - and we're not afraid to use it!

Training and Certifications

You can have free professional specializations and/or get a Cambridge English Certificate.

Learning & Development Opportunities

We support our employees' growth through a dedicated learning budget: for workshops, certifications, and courses. Because our company grows with our people. 

Flexible Working Hours

Recommended by 10 out of 10 parents and commuting colleagues.

Send us your CV.

By submitting this form, I acknowledge that Kentico will collect, store, and process my data. You may withdraw the consent anytime.

Do you know anyone who fits the bill for this position?
Let us know!

Related positions

Senior Software Engineer - DevEx

We are hiring a senior engineer into our Developer Experience division to build the APIs and agentic tooling that partners and internal teams use to build on Xperience by Kentic...

Customer Growth Manager, EMEA

Kentico is looking for a Customer Growth Manager to join our Customer Growth team covering EMEA. This is an Account Management role focused on retention and expansion across a p...

FP&A Senior Analyst

Kentico is a software company headquartered in Brno, with offices in the Czech Republic, the US, the UK, and Australia. We develop Xperience by Kentico, a modern digital experie...