Cyber Security Engineer

Apollo Solutions; Deutschland; Vor Ort; EUR 70.000 - 120.000; Vollzeit

Zusammenfassung

Apollo Solutions is partnering with a client expanding its cloud security engineering capabilities. The Cybersecurity Engineer will secure workloads across cloud environments, automate remediation, and ensure continuous compliance.

Responsibilities include IAM, Terraform security, Kubernetes security, SIEM integration, and CSPM/CNAPP. You will address GDPR/DSGVO, BSI C5, NIS2, and related regulatory needs while improving security posture.

Qualifikationen

• 4-8 years of cloud security engineering or DevSecOps experience.
• Hands-on with cloud security services across AWS, Azure, and/or GCP.
• Strong experience with Terraform and CI/CD security.
• Solid understanding of Kubernetes and container security.
• Experience with SIEM, CSPM, CNAPP, and cloud-native detection tooling.
• Familiarity with German and EU regulatory requirements.

Aufgaben

• Cloud Security Engineering: implement guardrails, secure configurations, and workload protections across AWS, Azure, and GCP.
• IAM Engineering: enforce least-privilege access, manage service accounts and workload identity, and oversee role governance.
• Terraform Security: build secure IaC modules, enforce policy-as-code, and automate security deployments.
• Kubernetes Security: secure clusters, admission controllers, network policies, and runtime protection.
• SIEM Integration: integrate cloud logs and findings into SIEM platforms.
• CSPM/CNAPP: support tooling and continuous security posture management.
• Security Reviews & Threat Modelling: conduct reviews and remediation activities.
• Regulatory Compliance: ensure GDPR/DSGVO, BSI C5, NIS2 compliance.

Kenntnisse

Cloud security

DevSecOps

CI/CD security

Kubernetes security

Threat modelling

Regulatory compliance

German/EU regulations

Tools

Terraform

Kubernetes

SIEM (Splunk/Chronicle/QRadar)

CI/CD tooling

Jobbeschreibung

Our client is expanding its cloud security engineering capability to support secure workloads across cloud environments. As a Cybersecurity Engineer, you will implement security controls, automate remediation, and ensure continuous compliance across cloud and containerised environments.

Key Responsibilities

• Cloud Security Engineering - Implement guardrails, secure configurations, and workload protections across AWS, Azure, and GCP.
• IAM Engineering - Enforce least-privilege access, manage service accounts and workload identity, and oversee role governance.
• Terraform Security - Build secure Infrastructure-as-Code (IaC) modules, enforce policy-as-code, and automate the deployment of security controls.
• Kubernetes Security - Secure clusters, admission controllers, network policies, and runtime protection.
• SIEM Integration - Integrate cloud logs and security findings into SIEM platforms such as Splunk, Chronicle, and QRadar.
• CSPM/CNAPP - Support Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tooling and continuous security posture management.
• Security Reviews & Threat Modelling - Conduct security reviews, threat modelling, and remediation activities.
• Regulatory Compliance - Ensure compliance with GDPR/DSGVO, BSI C5, NIS2, and relevant financial-sector regulatory frameworks.

Required Skills & Experience

• 4-8 years of experience in cloud security engineering or DevSecOps.
• Hands-on experience with cloud security services across AWS, Azure, and/or GCP.
• Strong experience with Terraform and CI/CD security.
• Solid understanding of Kubernetes and container security.
• Experience with SIEM, CSPM, CNAPP, and cloud-native detection tooling.
• Familiarity with German and EU regulatory requirements.

Nice to Have

• Relevant certifications, such as:
• AWS Certified Security - Specialty
• Microsoft Certified: Azure Security Engineer Associate
• HashiCorp Certified: Terraform Associate
• Experience within financial services or other regulated environments.
• Exposure to multi-cloud landing zones or sovereign cloud concepts.