Platform and Security Engineer

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 150.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a Developer‑Driven SecOps engineer who translates security and cloud workflows into automated, self‑service APIs and internal tooling for product teams.

You will design, build, and operate a secure AWS platform, apply zero‑trust controls, enforce SDLC security standards, and drive incident response with cross‑functional partners, including the CTO and CISO, ensuring resilient deployments.

Qualifikationen

• Experience turning security and infra tasks into automated, self‑serve tooling.
• Proficiency with Terraform/OpenTofu, AWS services, and CI/CD security.
• Strong Go and TypeScript background with CI/CD integration experience.
• Familiarity with cloud-native observability and CNAPP tooling is a plus.

Aufgaben

• Translate manual security and infrastructure processes into automated APIs and tooling.
• Design, build, and operate a secure AWS platform enabling self‑service for engineers.
• Apply zero‑trust principles and defense‑in‑depth controls across all layers.
• Develop and enforce security standards for SDLC and platform operations.
• Detect, triage, and respond to security incidents with post‑mortems and remediation.
• Enhance platform resilience by implementing security features and monitoring.
• Conduct ongoing threat reviews of tooling and controls, adapting to new risks.
• Collaborate with CTO, CISO, and engineering teams to align security with product goals.

Kenntnisse

Terraform

OpenTofu

Shell scripting

AWS core services

Go

TypeScript

GitHub Actions

Docker

Kubernetes

GitOps

Datadog

Wiz

Python

Java/Kotlin

Helm

Maven

Gradle

Spring framework

RabbitMQ

Jobbeschreibung

Responsibilities

• Developer-Driven SecOps: Leverage your programming background to transition manual security and infrastructure processes into automated, self-service APIs and internal tooling, speaking the same language as our product engineers.
• Platform Operations: Design, implement, and operate cloud infrastructure (primarily AWS) as a secure, reliable platform, enabling self-service for engineering teams to deploy and run applications.
• Infrastructure Hardening: Apply defense-in-depth and zero-trust principles, implementing layered security controls across network, compute, identity, and data tiers.
• Security Standards & Governance: Develop, document, and enforce security standards, guidelines, and hardening baselines for software development (SDLC) and platform operations, driving adoption across the organization.
• Incident Response: Detect, triage, manage, and respond to cyber security incidents, owning the process from initial signal through resolution and post-mortem.
• Hands-on Security Engineering: Actively address vulnerabilities, implement security features (WAF rules, SIEM monitors, access policies), and improve overall platform resilience.
• Continuous Threat Review: Conduct ongoing reviews of security tooling (such as our CNAPP Wiz), processes, and controls in response to new threats, architecture changes, and internal risk assessments.
• Harness Engineering: Extend and improve our tooling that supports the Agent-Harnesses to safeguard AI-assisted development workflows across the SDLC.
• Stakeholder Collaboration: Coordinate, communicate, and align seamlessly with key stakeholders including the CTO, CISO, Engineering Managers, Tech Leads, and cross-functional product teams.

Requirements

• Developer Empathy: You understand the Go and TypeScript ecosystems from a developer’s perspective. You know how to secure software supply chains and integrate security seamlessly into CI/CD pipelines without slowing the product teams down.
• Manager-of-one: You are highly self-sufficient, taking full ownership of tasks and projects without requiring close supervision.
• Good Communicator: You can explain complex technical details clearly and collaborate effectively with diverse teams and stakeholders.
• Eager to Learn: You have a passion for learning new technologies and are always curious to dive into unknown territory.
• Excited About Tech: You love tackling challenging technical problems, have a genuine passion for tech, and are sufficiently nerdy (and "nerd-snipeable"!).
• Reliable & Quality-Aware: You deliver on time while paying close attention to detail and maintaining high standards in your work.
• Daily (High Proficiency): Terraform/OpenTofu, Shell-scripting, and core AWS services (VPC/Networking, EC2, ELB, Route53, IAM, RDS, CloudFront, Lambda, S3, CloudTrail, CloudWatch Logs, StepFunctions).
• Weekly (Familiarity & Automation): Go, TypeScript, GitHub Actions, Docker, Kubernetes (K8s), GitOps, Datadog (Cloud-Native Observability), and Wiz (CNAPP).
• Monthly (Occasional Use): Python, Java/Kotlin, Helm, Maven, Gradle, Spring framework, RabbitMQ.