• Support technical demos with customers, operators, partners, and investors. • Install, configure, test, and troubleshoot demo systems and pilot deployments. • Travel between Bergamo, Zaragoza, and customer sites as needed. • Work with engineering teams to diagnose field issues • Help customers understand technical requirements and deployment steps. • Collect structured feedback from customers and partners. • Create installation guides, troubleshooting guides, FAQs, and customer technical notes. • Support pilot rollouts, hardware testing, software validation, and demo preparation.

• Internal tooling & automation: Design, develop, and maintain internal applications and automations that eliminate manual IT/Security work, including provisioning, access reviews, compliance evidence collection, audit preparation, and ticket triage. • Internal tooling & automation: Develop and maintain integrations across the security and IT stack, including Okta, Zscaler, Splunk/Wazuh, Lacework, Drata, Datadog, AWS, GCP, GitHub, and n8n. • Internal tooling & automation: Package, deploy, and operate IT/Security tooling using Parachute's standard deployment patterns and observability stack. • AI & agentic workflows: Architect agentic AI workflows for IT and Security operations, including automated alert triage, log correlation, root-cause analysis, guided remediation, access-review automation, and audit evidence collection. • AI & agentic workflows: Build the context layer (MCP servers, retrieval pipelines, and embeddings) that grounds AI agents in Parachute-specific systems, policies, and runbooks. • AI & agentic workflows: Drive AI adoption across the IT/Security team through pairing, architecture reviews, and reusable skills/plugins/workflows. • AI & agentic workflows: Build an MCP-based agent that automates audit evidence collection from multiple sources. • AI & agentic workflows: Replace manual access-review workflows with an agentic pipeline. • Security: Develop, tune, and maintain SOAR/SIEM detections, dashboards, and correlation rules in Splunk/Wazuh. • Security: Support threat hunting, incident investigation, pen test, and/or red teaming, and forensic analysis with custom tooling and queries (Redshift, BigQuery, log platforms). • Security: Apply MITRE ATT&CK, NIST CSF, and HITRUST CSF to guide detection engineering and control implementation. • Security: Contribute to SOC runbooks, SOPs, and automation playbooks (SOAR). • Security audits & reliability: Automate compliance evidence collection and control validation across SOC 2, HITRUST CSF, HITRUST AI, and HIPAA. • Security audits & reliability: Participate in an on-call rotation for IT/Security incidents; contribute to post-incident reviews and continuous improvement. • Security audits & reliability: Maintain stable, performant, and auditable internal application stacks.

• Lead security architecture reviews for new and existing applications, ensuring secure-by-design principles are embedded from initial design through deployment and ongoing operation. • Develop, enforce, and continuously refine secure coding standards across engineering teams through a combination of automated security scans (SAST, DAST, SCA), AI-assisted code review using tools such as Claude Code, periodic manual code audits, and targeted secure development training. • Own the design, implementation, and evolution of Application Security Posture Management (ASPM) capabilities, integrating signals from static analysis, dynamic testing, software composition analysis, and runtime telemetry to build risk-scoring models that balance exploitability, data sensitivity, and business impact. • Continuously improve threat modeling frameworks across application components, third-party integrations, cloud-native architectures, and AI/LLM-powered features, leveraging tools such as Claude Security for accelerated threat model generation and scenario analysis. • Develop custom security automation tools and scripts to improve detection and response capabilities across cloud environments, including AI-assisted vulnerability auto-fix workflows and integration of AI-powered security tooling into CI/CD pipelines. • Own and operate the company’s bug bounty program end-to-end: define program strategy and scope, triage and validate external researcher submissions, assess severity, and maintain productive engagement with the security research community. • Manage vulnerability triage and prioritization processes, ensuring vulnerabilities are assessed based on exploitability, business impact, and compliance requirements, and that remediation timelines align with organizational risk tolerance.

Role Description Ciklum is looking for an Expert Java Engineer to join our team full-time in Poland. As an Expert Java Engineer, become a part of a cross-functional development team engineering experiences of tomorrow. - Lead the Ciklum pod that our Client is bringing on to scale post-Series B engineering. - Deliver against two parallel workstreams: - Net-new feature engineering on the Java 21 / Spring Boot 3 platform. - Salesforce-to-microservices data and capability migration. - Act as the single throat-to-choke for the pod technically, and the principal technical interface to Client's VP Engineering and senior staff engineers. Responsibilities - Own the technical roadmap and sequencing of the Salesforce → microservices migration. - Define bounded contexts, the order of extraction, and the parallel-run / cutover strategy. - Set engineering standards for the pod — ADRs, code review bar, branching model, definition of done. - Run the pod's delivery rhythm: planning, demos, retros, weekly engineering written update to Client. - Personally code 40–60% of the time. This is a hands-on lead role, not an architect-on-the-sidelines role. - Front the technical relationship with Client — RFC reviews, architectural debates, escalation point for blockers. - Own quality at the pod level: SLOs are met, test coverage holds, deployments don't break trunk. - Be the productivity multiplier on AI tooling for the pod — set the patterns for Copilot/Claude Code use, prompt libraries, AI-assisted code review. Qualifications - 8+ years building Java backend systems, with at least 3 years on Spring Boot in production. - Demonstrable monolith-to-microservices migration experience as the technical lead — not as a contributor. - Strong AWS architectural experience — VPC design, IAM, RDS PostgreSQL, ECS/EKS, SQS/SNS or equivalent. - Hands-on with async messaging architectures (Kafka, RabbitMQ, AWS SNS/SQS, or equivalent) including idempotency, ordering, and backpressure. - Track record of leading pods of 4–8 engineers in a fully remote or hybrid setting. - Native-level English — written and spoken. You will write the team's ADRs and design docs. Desirable - Direct experience with Salesforce data extraction and migration to a relational target. - Working experience with AI agent frameworks — LangGraph, LangChain, CrewAI, or comparable. - Logistics, supply chain, B2B marketplace, or WMS / TMS domain background. - Prior technical-lead role in a Series B–C scale-up that grew from 5 to 50+ engineers. - Open-source contributions or technical writing that demonstrate the engineering bar. Benefits - Strong community: Work alongside top professionals in a friendly, open-door environment. - Growth focus: Take on large-scale projects with a global impact and expand your expertise. - Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications. - Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands-on experience with cutting-edge technologies. - Flexibility: Enjoy flexibility – full remote working possibilities. - Care: We’ve got you covered with company-paid medical insurance, mental health support, and financial & legal consultations. Company Description At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress. With delivery centers in Wrocław and Gdańsk, our 300+ professionals in Poland drive forward-thinking solutions for global clients. Join a community where collaboration sparks innovation—and your impact reaches millions. Explore, empower, engineer with Ciklum!