Security Engineer

Academic Key; Berlin; Hybrid; EUR 90.000 - 140.000; Vollzeit

Zusammenfassung

Augustus in Berlin is seeking a Security Engineer to own security engineering end-to-end across application, infrastructure, and incident response. This role reports to the CISO and will drive measurable security improvements from design through production.

You will write and ship security automation, enforce SDLC across EU-live and US launch-critical services, and work with product teams to balance risk and velocity. AI tooling and cloud/CI/CD hardening are key focuses.

Qualifikationen

• Hard Requirements Extensive experience in hands-on security engin

Aufgaben

• The Role You will own security engineering end-to-end across application, infrastructure, and incident response: partnering with product and platform teams during design, writing and shipping security automation in production, and leading high-quality response when something breaks.
• Day to day, you will help define security in a greenfield modern bank, moving beyond threat modeling, harden cloud and CI/CD paths, build detection and response workflows, and drive remediation to closure with clear risk tradeoffs.

Jobbeschreibung

Security Engineer

Augustus · Berlin

Full Time

Few people get to build a bank from scratch. Even fewer get to build one at a moment when banking itself is being reinvented. The Dollar is the best product in the history of the world - there is infinite global demand. But international fintechs and banks are left with two unsatisfying options to choose from: Either build on legacy correspondent banks that are slow and unreliable, or interface with middleware providers that neither move nor hold the dollars directly, but instead rely on underlying legacy banks themselves. At Augustus, we collapse the stack by combining two things: A real, national bank charter (in organization), and Marble, our proprietary core banking system, built around intelligence, made of code. We are a group of ex-founders, founding employees of unicorns, and people who dropped out of university because they believe this is an industry and career defining opportunity. We are backed with more than $200M from Peter Thiel's Valar Ventures, Tiger Global, Hummingbird, QED, Creandum, and the founders of Nubank, Ramp, Deel, Circle, Fluidstack, Fuse, and Etched. We are regulated in Europe and live with Euro and Stablecoin clearing today. Now, we are building the US team from the ground up, while continuing to grow rapidly in Europe. The Role You will own security engineering end-to-end across application, infrastructure, and incident response: partnering with product and platform teams during design, writing and shipping security automation in production, and leading high-quality response when something breaks. Day to day, you will help define security in a greenfield modern bank, moving beyond threat modeling, harden cloud and CI/CD paths, build detection and response workflows, and drive remediation to closure with clear risk tradeoffs. This role reports to the CISO. What matters most is measurable risk reduction that keeps product velocity high. Your First Six Months Understand the foundations and increase your ownership rapidly. Months 1-2: Enforce an SSDLC that codifies existing security goals across EU-live payment/ledger services and US launch-critical services into required design, build, and release checkpoints (ownership, control evidence, and exception handling), with 100% of net-new Tier-1 changes following the workflow. Months 3-4: Stand up an AI-native product-security review pipeline that auto-triages code/dependency/IaC findings by service criticality, proposes fixes in pull requests, and routes owner-tagged remediation tasks and reduces non-actionable security alerts. Months 5-6: Expand baseline coverage to >=85% of Tier-1 services for workload identity hardening, secret management standards, runtime audit logging, and high-severity dependency monitoring; start monthly control-evidence reporting to Security & Compliance. Who Will Thrive At Augustus We believe that throwing smart people with high agency at big problems produces the best outcomes. We’re building a modern correspondent bank, and we win by having a better team. The people who succeed here share the following traits: American Dream: You’d rather shoot for gold than settle for mediocrity. You pick the harder goal and stay optimistic when the odds are against you. If it feels easy, we aimed too low. Live Player: You don’t need permission. You rebuild what’s broken without being asked, challenge how things are done, and move before the perfect moment. Ever to Excel: You can’t accept good enough and you take your work personally. When it matters, you do what it takes and keep raising the bar for yourself and your team. Genuine: You play for the company, not your title or turf. Low ego, low drama, no politics. You say it straight, also upwards and always assume good intent. This role is for you if: You can point to security automation you personally built that replaced recurring manual review work. You have strong product security fundamentals and can improve secure-by-default patterns in fast-moving engineering teams. You have led end-to-end rollout of security controls in production, from design and implementation through adoption and evidence. You regularly influence architecture decisions before launch through fast, lightweight risk reviews and pragmatic controls. You are comfortable writing production-grade code or infrastructure changes, not only policy or tickets. You use AI tooling to accelerate security reviews and remediation planning without lowering quality or signal. You push ambiguous work forward without waiting for a complete playbook, and you bring stakeholders with you. This is not for you if: You prefer advisory-only security roles and do not want direct implementation ownership. You need tightly scoped tickets to make progress and are uncomfortable defining the plan yourself. You avoid ownership of production systems and control implementation work. You optimize for stability over change and are not excited by early-stage ambiguity. Hard Requirements Extensive experience in hands-on security engin