Information Security Engineer Lead

Neko Health; Berlin; Vor Ort; EUR 100.000 - 170.000; Vollzeit

Zusammenfassung

Neko Health is seeking an Information Security Engineering Lead to join our Security team across Berlin, Stockholm, or London. You will lead security reviews, guide engineers on secure design, and embed security testing throughout the product lifecycle.

You will drive threat modelling, vulnerability reproduction, and secure CI/CD integration, while leveraging AI tools to enhance detection and protection of cloud environments.

Qualifikationen

• 5 years of experience with security assessments, security design reviews, or security engineering.
• Experience in one or more general purpose languages, preferably C#, Python, C++, Javascript or Java.
• Experience with cloud infrastructures like Azure, GCP or AWS.

Aufgaben

• Lead security reviews and assess vulnerabilities across the product lifecycle.
• Work with software engineers to identify, fix security flaws and implement mitigations.
• Build security capabilities into CI/CD pipelines and improve detection.
• Perform threat modelling of large systems to prioritize security reviews.
• Leverage AI tools to scale security capabilities and harden cloud infrastructures.

Kenntnisse

Security assessments

Security design reviews

Security engineering

Cloud security

Programming languages

Jobbeschreibung

Mission

Neko is redefining what prevention means, from treating illness when it arrives, to sustaining health before it's ever at risk. Our mission: make data-driven, preventative care accessible to more people, before symptoms appear.

Job Title

Information Security Engineering Lead

Location

Stockholm, London, or Berlin

Employment Type

Full-time

Role Purpose

Our Security team works to create and maintain the safest environment for Neko's members and developers. We embed security into the entire product lifecycle, from initial design and think-it through launch and beyond. In this role, you will also work with and lead software engineers to proactively identify and fix security flaws and vulnerabilities, conduct in-depth security reviews throughout the product lifecycle, build security capabilities into CI/CD pipelines, and improve detection.

What You’ll Deliver In The First 6-12 Months

• Conduct security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices and provide security guidance for engineers and staff.
• Assess designs and look for vulnerabilities, both with launch reviews and longer-term engagements.
• Look for vulnerabilities with techniques including but not limited to AI, manual code review, fuzzing, and static code analysis.
• Perform threat modelling of large and complex systems to quickly determine areas that warrant further investigation and direct security review.
• Leverage AI tools and agents in your day-to-day work to scale your own capabilities.
• Hardening and securing cloud infrastructures

Minimum Qualifications

• 5 years of experience with security assessments, security design reviews, or security engineering.
• Experience in one or more general purpose languages, preferably C#, Python, C++, Javascript or Java.
• Experience with cloud infrastructures like Azure, GCP or AWS

Preferred Qualifications

• 10 years of experience with security assessments, security design reviews, or security engineering.
• Understanding both offensive and defensive security methods.
• Experience in three or more general purpose languages, preferably C#, Python, C++, Javascript or Java.
• Good knowledge and experience with breaking and securing cloud infrastructures like Azure, GCP or AWS