Infrastructure Security Engineer

Jobtailor; Deutschland; Vor Ort; EUR 95.000 - 160.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a senior Infrastructure Security Engineer in Germany to lead security across cloud infrastructure, production systems, and internal platforms. You will design controls, drive hardening, manage IAM and incident response, and partner with engineering to secure CI/CD pipelines and IaC environments.

You will apply zero-trust concepts, work with security governance frameworks, and contribute to threat intelligence programs in a fast-paced startup setting.

Qualifikationen

• 7+ years of experience in infrastructure security or related fields.
• Strong experience securing AWS environments.
• Deep Linux administration and security knowledge.
• Hands-on with Kubernetes and cloud-native infrastructure.
• Experience with SIEM, EDR, logging, monitoring, and incident response tooling.
• Networking, DNS, firewalls, and cloud security fundamentals.
• IAM, RBAC, secrets management, and privileged access controls.
• CI/CD security in IaC environments.
• Scripting: Python, Go, Bash, or similar languages.
• Production security leadership experience.
• Security in fintech/blockchain environments.
• Terraform, Pulumi, Ansible familiarity.
• SOC 2 / ISO 27001 familiarity.
• Zero-trust and modern cloud security practices.
• Threat hunting and threat intelligence programs.
• Startup or high-growth background.

Aufgaben

• Lead the security of Alpen’s cloud infrastructure, production systems, internal platforms, and operational environments.
• Design, implement, and maintain security controls across AWS and cloud-native infrastructure.
• Lead infrastructure hardening initiatives across servers, containers, Kubernetes clusters, and cloud services.
• Drive identity and access management programs, including least-privilege access, RBAC, privileged access management, and secrets management.
• Own vulnerability management processes, remediation programs, and infrastructure security reviews.
• Build and improve security monitoring, detection engineering, alerting, and incident response capabilities.
• Investigate security incidents, conduct root‑cause analysis, and lead response and recovery efforts.
• Develop and maintain incident response playbooks, operational procedures, and security runbooks.
• Partner with engineering teams to secure CI/CD pipelines, deployment workflows, and developer platforms.
• Review infrastructure architecture and operational changes to identify and mitigate security risks.
• Automate security controls and integrate security tooling into engineering workflows.
• Conduct threat modeling and architecture reviews for infrastructure and platform services.
• Support endpoint security, device management, vendor security assessments, and internal security initiatives.
• Establish security metrics, reporting, and visibility into operational risk across the organization.
• Collaborate effectively within a globally distributed team.

Kenntnisse

Cloud security

AWS security

Kubernetes security

IAM & RBAC

Threat modelling

Incident response

CI/CD security

Automation scripting

Terraform / IaC

Security governance

Tools

SIEM

EDR

Kubernetes

Terraform

Pulumi

Ansible

Python

Go

Jobbeschreibung

Responsibilities

• Lead the security of Alpen’s cloud infrastructure, production systems, internal platforms, and operational environments.
• Design, implement, and maintain security controls across AWS and cloud-native infrastructure.
• Lead infrastructure hardening initiatives across servers, containers, Kubernetes clusters, and cloud services.
• Drive identity and access management programs, including least-privilege access, RBAC, privileged access management, and secrets management.
• Own vulnerability management processes, remediation programs, and infrastructure security reviews.
• Build and improve security monitoring, detection engineering, alerting, and incident response capabilities.
• Investigate security incidents, conduct root‑cause analysis, and lead response and recovery efforts.
• Develop and maintain incident response playbooks, operational procedures, and security runbooks.
• Partner with engineering teams to secure CI/CD pipelines, deployment workflows, and developer platforms.
• Review infrastructure architecture and operational changes to identify and mitigate security risks.
• Automate security controls and integrate security tooling into engineering workflows.
• Conduct threat modeling and architecture reviews for infrastructure and platform services.
• Support endpoint security, device management, vendor security assessments, and internal security initiatives.
• Establish security metrics, reporting, and visibility into operational risk across the organization.
• Collaborate effectively within a globally distributed team.

Requirements

• 7+ years of experience in infrastructure security, security engineering, security operations, or related fields
• Strong experience securing cloud environments, particularly AWS
• Deep understanding of Linux systems administration and security
• Hands‑on experience with Kubernetes, containers, and cloud-native infrastructure
• Experience with SIEM, EDR, logging, monitoring, and incident response tooling
• Strong knowledge of networking, VPNs, DNS, firewalls, load balancing, and network security principles
• Experience implementing IAM, RBAC, secrets management, and privileged access controls
• Experience securing CI/CD pipelines and infrastructure‑as‑code environments
• Strong scripting or programming skills in Python, Go, Bash, Rust, or similar languages
• Experience leading security initiatives in production environments
• Experience supporting blockchain, fintech, or financial infrastructure environments
• Experience securing Bitcoin, Layer 2, or distributed systems infrastructure
• Familiarity with Terraform, Pulumi, Ansible, or similar infrastructure‑as‑code tooling
• Experience with SOC 2, ISO 27001, or similar security and compliance frameworks
• Knowledge of zero‑trust architectures and modern cloud security practices
• Experience with threat hunting, detection engineering, and threat intelligence programs
• Background working in startup or high‑growth environments.