Cloud Security Engineer

HireHi; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Персональный бюджет на развитие

Бюджет на удалённую работу

Скидки на абонементы фитнес/здоровье

Приложения для изучения языков

Транспортные льготы

Zusammenfassung

N26 ищет руководителя функции облачной инфраструктурной безопасности в Берлине. Ваша роль — выстраивать дорожную карту безопасности, взаимодействуя с PM, Tech Lead и Eng Manager, разрабатывать решения и методики защиты, обеспечивая соответствие требованиям и стабильность облачной платформы.

Требуется опыт работы с AWS, Terraform, CI/CD, а также знание OWASP, MITRE ATT&CK и STRIDE. Предлагаются целевые технологии и возможность переезда с поддержкой.

Qualifikationen

• Опыт защиты AWS-инфраструктуры и CI/CD
• Опыт работы с Terraform и другими инструментами IaC
• Знание STRIDE, MITRE ATT&CK®, OWASP
• Понимание задач облачной безопасности и лучших практик

Aufgaben

• Разработка дорожной карты функций Cloud Infrastructure Security совместно с PM, Tech Lead и Eng Manager
• Проектирование и внедрение решений для защиты данных, обнаружения угроз и контроля изменений
• Проведение threat modeling и определение мер по уменьшению рисков
• Участие в инцидент-ответе и поддержка стейкхолдеров
• Документация и методологии безопасной эксплуатации облака

Kenntnisse

AWS Security

CI/CD security

Linux

Python

Bash

Go

Threat modeling

Cloud security

Ausbildung

Master's in cybersecurity

Tools

CSPM/CNAPP

Vulnerability scanners

IDS/IPS

KSPM

Container security

Jobbeschreibung

Описание:

N26 is a digital banking platform that provides an online banking experience without physical branches, paperwork, or hidden fees.

Задачи:

Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager Own, define, and drive initiatives, solutions, processes, and frameworks to identify and mitigate threats in the AWS infrastructure and improve security maturity Design, deploy, and maintain cloud-native security solutions for data protection, threat detection, automated controls, alerting, remediation, compliance, and infrastructure protection Research new attack vectors proactively Conduct threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders Monitor vulnerabilities, assess risks, and collaborate with cross-functional teams to mitigate them Define penetration-testing scope and scenarios Develop and maintain documentation and guidelines for secure cloud operations Provide support to stakeholders through the support portal Participate voluntarily in the security incident response on-call rotation and lead security incidents

Требования:

Experience securing AWS cloud infrastructure, CI/CD pipelines, containerized environments, and Linux systems Experience assessing security findings and mitigation strategies Knowledge of security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP Understanding of cloud data security challenges and best practices Experience deploying and customizing security tools, such as CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, and container runtime security Proficiency with CI/CD pipelines, such as Terraform, for automated security testing and change management Hands-on experience with cloud technologies and deployment patterns, including virtual machines, containers, Kubernetes, serverless, and infrastructure as code Proficiency in Python, Bash, or GO for scripting and automation Experience with ethical hacking and penetration-testing methodologies Familiarity with agile methodologies and project management Ability to collaborate across teams and segments to achieve complex objectives Hands-on approach and ability to drive solutions to completion Excellent oral and written communication skills Growth mindset focused on learning and supporting team development Master's degree in cybersecurity or a related field, or a Bachelor's degree in computer science or a related field with an advanced security certification

Будет плюсом:

Contributions to the security community, such as open-source tools, research papers, or conference talks

Условия:

• Employee benefits include a personal development budget, work-from-home budget, discounts on fitness and wellness memberships, language apps, and public transportation
• Premium subscription to a personal N26 bank account, plus subscriptions for friends and family members
• An additional day of annual leave for each year of service
• High degree of autonomy and access to cutting-edge technologies
• Relocation package with visa support for those who need it