Security & Compliance Engineer (all genders) - Remote Germany arbeitnow Linro Germany · 10/9/2026

Primetime; Deutschland; Remote; EUR 100,000 - 140,000; Full time

Benefits offered by this job

Equity stake

Competitive salary

European offsite quarterly

Job summary

Linro, a cloud security company, seeks a security/compliance lead to build and own the program end-to-end from a blank page. You will drive gap analyses, document controls, and map evidence for audits across AWS and other clouds.

You will automate compliance with guardrails, ensure IaC is governed, and maintain audit-ready evidence. The role involves close collaboration with security operations and product teams in a remote European setup.

Qualifications

• Hands-on experience with SOC 2, ISO 27001, or ISO 42001: gap analysis, evidence mapping, audit success.
• Genuine interest in cloud security, governance, and compliance with ownership mindset.
• Ability to read cloud configurations and IaC across providers; automate at scale.
• Careful, structured, and trustworthy when handling sensitive material.

Responsibilities

• Take SOC2, ISO 27001 and 42001 from blank page to audit-ready, map evidence and document controls.
• Automate compliance checks and guardrails in multi-cloud environments using Terraform.
• Own compliance evidence end-to-end across tooling and platforms.
• Support security operations: monitoring, alert triage, and documenting findings.
• Test product against compliance checks, integrating with the engine used for customers.

Skills

SOC 2

ISO 27001

ISO 42001

Cloud security

Tools

Terraform

AWS

GCP

Azure

Job description

Linro is a cloud security company building a real-time, agentic cloud-security platform. Teams ship with AI. AI ships with Linro.

Cloud infrastructure changes constantly, and increasingly it's AI agents making those changes, not people. Most security tools only catch problems after the fact. Linro works differently. We enforce what's allowed at every stage, from commit to production. We stop bad changes before they ship, and fix problems in real time once they're live.

We have each been on the receiving end of this problem: running cloud security at scale, building the platforms underneath it, and shipping in regulated systems where a wrong change isn't an option. Founded in Berlin in 2026 and built fully remote across Europe, Linro has a platform that's real and working, with plenty still to shape.

The role

You will own Linro's security and compliance program end to end, starting from a blank page. Your job is to build that from scratch: figure out where we actually stand, find the gaps, and close them across a multi-cloud environment. Automate what can be automated instead of redoing the same work by hand every quarter.

What you will do

• Take SOC2, ISO 27001 and 42001 from a blank page to audit-ready. Run the gap analysis, document controls and policies, gather and map evidence, track remediation to done, and get us through audit.
• Automate compliance instead of just babysitting it: build checks and guardrails so we stay continuously compliant, and help ensure our multi-cloud infrastructure (AWS and beyond) is managed as Infrastructure-as-Code with Terraform.
• Own our compliance evidence end to end: keep it current, mapped, and audit-ready across whatever tooling we run.
• Support security operations: monitoring, alert triage, and documenting findings.
• Stay close to how the product is actually built. Our compliance checks run on the same engine we sell customers, so you are testing the product, not filling out paperwork off to the side.

What we are looking for

• Hands-on experience with at least one of SOC 2, ISO 27001, or ISO 42001: you have run a gap analysis, built and mapped evidence, and taken a program through an actual audit, not just studied the framework. Experience across more than one is a plus.
• Genuine interest in cloud and information security, governance, and compliance, and the drive to own outcomes, not just tasks.
• Comfort reading cloud configurations and IaC across multiple providers. Ability to automate scales with level.
• Careful, structured, and trustworthy. You will handle sensitive material.

Nice to have

• Hands-on Terraform, and experience with AWS, GCP, and/or Azure.
• Exposure to a compliance automation platform.
• Prior general software engineering experience, ideally in the stacks we use day to day (Go, SQL, and cloud infrastructure)

How we work

We are remote across Europe and hire anywhere within roughly two hours of Central European Time (CEST). We get the whole team together in person somewhere in Europe once a quarter for a few days. We work async by default, write things down, and protect people's focus time.

What we offer

• Real ownership of the security and compliance program from the ground up.
• Meaningful equity. You are an early employee, and your stake reflects it.
• Competitive salary, benchmarked to the market.
• A quarterly European offsite, and a team that takes both the mission and each other’s time seriously.

The honest version

This is early, we are literally at the start today. You would start from a blank page, not maintain someone else's polished program. That is the appeal if you want to build a security and compliance function from scratch and carry it all the way to real certifications. It is daunting if you are looking for a mature program to step into. We hire at multiple levels, so this can be a first serious role or a senior mandate. Either way, you will own real outcomes fast.

This overview was written from the original listing to help you understand the role. Always confirm the specifics on the employer's application page.