Senior Security Engineer

Jobgether; Schweiz; On-site; CHF 140,000 - 190,000; Full time

Benefits offered by this job

Ownership of security programme

Global impact

Professional development

Collaborative team

Job summary

Jobgether is seeking a Senior Security Engineer based in Switzerland to safeguard a real-time, cloud-based fraud prevention platform serving global customers. You will drive security automation, IAM, and incident response across AWS, Kubernetes, Terraform, and GitHub, leading ISO 27001,ISO 42001, SOC 2, and PCI DSS initiatives.

This role shapes security strategy in a fast-growing tech environment. Join a collaborative team and help automate evidence collection, access reviews, and compliance

Qualifications

• 5+ years of professional experience in security engineering, with substantial hands-on AWS security
• Strong knowledge of AWS security services and technologies (IAM, CloudTrail, GuardDuty, Security Hub, WAF)
• Pra ctical experience with Terraform, Kubernetes, and GitHub Actions for security and policy compliance
• Programming experience in Python or similar language for automating security workflows
• Experience leading ISO 27001 or SOC 2 certification programmes and working with external auditors
• Experience managing customer security questionnaires and vendor assessments
• Excellent written English communication and documentation skills
• Ability to work independently, prioritize, and drive automation
• Familiarity with DORA, EU AI Act, and financial-regulatory requirements is a plus
• Additional experience in detection engineering, incident response, Kyverno, Linkerd, or Amazon EKS security tooling is a plus

Responsibilities

• Design and implement automated evidence collection pipelines across AWS, GitHub, CI/CD systems, and identity tools
• Automate access reviews across AWS IAM, Google Workspace, GitHub, and SaaS apps
• Identify and remediate IAM weaknesses and promote short-lived identities
• Develop Terraform and CI/CD security controls and standardized baselines for cloud accounts and Kubernetes
• Participate in on-call rotations and coordinate incident containment and resolution
• Develop detections using CloudTrail, GuardDuty, WAF, and Kubernetes telemetry
• Validate findings from penetration tests and contribute to threat modelling
• Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS programmes and coordinate with auditors
• Own customer security questionnaires and vendor security reviews
• Translate regulatory requirements into practical security controls
• Maintain security policies and risk registers

Skills

Cloud security

AWS IAM

Incident response

Terraform

Kubernetes

Python scripting

Identity and access management

Tools

Terraform

Kubernetes

GitHub Actions

AWS services

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Switzerland.

In this role, you will play a key part in protecting a real-time, cloud-based fraud prevention platform serving customers across highly regulated industries worldwide. You will combine hands-on cloud and infrastructure security engineering with ownership of security assurance and compliance programmes. Working across AWS, Kubernetes, Terraform, and GitHub environments, you will strengthen identity management, automate security controls, and improve threat detection and incident response capabilities. You will also lead major certification and compliance initiatives, including ISO 27001, ISO 42001, SOC 2, and PCI DSS. A key focus will be building an engineering-driven security programme where evidence collection, access reviews, and compliance workflows are automated. This is an opportunity to shape security strategy, influence technical decisions, and contribute to a fast-growing international technology environment.

Accountabilities

• Security Automation and Compliance Engineering: Design and implement automated evidence collection pipelines across AWS, GitHub, CI/CD systems, and identity management tools. Select and manage compliance automation solutions, ensuring security controls are continuously verified through code rather than manual processes.

• Identity and Access Management: Automate access reviews across AWS IAM, Google Workspace, GitHub, and essential SaaS applications. Develop self-service access request workflows in collaboration with Platform and IT teams, while strengthening identity governance for employees, workloads, and AI agents.

• Cloud and Infrastructure Security: Identify and remediate IAM weaknesses, including unused roles, excessive permissions, long-lived credentials, and privileged root or emergency access. Promote short-lived, appropriately scoped identities with clear ownership.

• Infrastructure Security Guardrails: Develop and maintain Terraform and CI/CD security controls, including secrets scanning, policy validation, signed container images, and standardized security baselines for cloud accounts and Kubernetes clusters.

• Threat Detection and Incident Response: Participate in on-call and security incident triage rotations. Investigate alerts generated by AWS GuardDuty, Security Hub, WAF, and Kubernetes, manage vulnerability and bug bounty reports, and coordinate incident containment and resolution.

• Detection Engineering: Develop and continuously improve security detections using CloudTrail, GuardDuty, WAF, and Kubernetes telemetry. Contribute to cross-signal correlation capabilities and AI-assisted security alert triage.

• Security Reviews and Risk Assessment: Validate penetration testing findings and vulnerability remediation activities, review infrastructure and IAM changes, and contribute to threat modelling for new services and AI-related features.

• Security Assurance and Certification: Lead the ISO 27001, ISO 42001, SOC 2, and PCI DSS programmes. Establish a unified control framework across standards, manage compliance scope and gap assessments, coordinate with external auditors, track remediation activities, and oversee ongoing surveillance and certification cycles.

• Customer and Vendor Security Management: Own customer security questionnaires and third-party vendor security reviews. Maintain security documentation and trust materials, while developing AI-assisted tools to streamline questionnaire responses.

• Governance and Regulatory Compliance: Maintain clear and up-to-date security policies and risk registers. Translate evolving regulatory requirements, including DORA, the EU AI Act, and regional financial regulations, into practical security controls and engineering initiatives.

Requirements:

• At least 5 years of professional experience in security engineering, with substantial hands-on experience securing AWS environments.
• Strong knowledge of AWS security services and technologies, particularly IAM, CloudTrail, GuardDuty, Security Hub, and WAF, with the ability to investigate incidents directly from infrastructure logs.
• Practical experience with Terraform, Kubernetes, and GitHub Actions, including the ability to review infrastructure modules and CI/CD workflows for security and policy compliance.
• Programming experience in Python or a similar language, with the ability to automate evidence collection, access reviews, alert enrichment, and security workflows.
• Familiarity with APIs, CI/CD pipelines, and infrastructure automation practices.
• Proven experience leading an ISO 27001 or SOC 2 certification programme, ideally acting as the primary point of contact for external auditors.
• Experience managing customer security questionnaires, vendor assessments, and security due diligence processes.
• Strong understanding of cloud security, identity and access management, infrastructure hardening, vulnerability management, and incident response.
• Excellent written English communication skills, with the ability to produce clear and concise documentation for auditors, technical teams, and customers.
• Strong organizational and prioritization skills, with the ability to make independent decisions, manage competing priorities, and work effectively against a defined roadmap.
• Proactive and collaborative mindset, with the confidence to take ownership of security initiatives while recognizing when to seek support.
• Experience with ISO 42001, AI governance, PCI DSS in a service provider environment, or DORA and financial-sector regulatory requirements is a strong advantage.
• Additional experience in detection engineering, incident response, Kyverno, Linkerd, or Amazon EKS security tooling would be considered a plus.

Benefits:

• Opportunity to take ownership of a broad security engineering and assurance programme within an innovative technology environment.
• Exposure to advanced cloud infrastructure, AI technologies, and real-time fraud prevention systems.
• Opportunity to lead and automate internationally recognized security certification and compliance programmes.
• Collaborative environment working alongside experienced application security, platform security, and engineering professionals.
• Significant technical ownership and the opportunity to influence security architecture, processes, and engineering standards.
• Professional development opportunities in cloud security, AI governance, regulatory compliance, and security automation.
• Opportunity to contribute to protecting financial and digital services used by businesses worldwide.
• Inclusive and diverse working environment that values individual perspectives and equal employment opportunities.