Security engineer for cloud platforms

Preply; Berlin; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Lessons allowance for learning

L&D budget

Equity

Leave allowance

Job summary

Preply ищет инженера по безопасности платформ в Берлине для защиты AWS, Kubernetes и GCP. Ваша роль — внедрять детектирование и реагирование, развивать процессы инцидентов и работы между SRE, Data и Engineering. Требуется опыт в CI/CD и IaC, знание Okta и Datadog.

Будет плюсом Terraform, CI/CD безопасность и готовность к дежурствам. Конкурентное пакет вознаграждений и equity. Присоединяйтесь к команде, ускоряющей глобальное обучение.

Qualifications

• Опыт обеспечения безопасности облачных платформ AWS и Kubernetes, расширение на GCP
• Управление техническими инициативами по безопасности в production
• Понимание CI/CD и инфраструктуры как кода
• Практический опыт повышения идентификационной безопасности и мониторинга

Responsibilities

• Обеспечивать безопасность платформ на AWS, Kubernetes и GCP с упором на обнаружение, оповещения и готовность к инцидентам
• Возглавлять ключевые инициативы по безопасности платформ от определения проблемы до развёртывания
• Выступать техническим голосом в дизайне и эксплуатации безопасности платформ Preply
• Модернизировать мониторинг от наличия SIEM до эффективной детекции и реагирования
• Работать с инструментами Datadog, Okta и рядом SaaS-платформ
• Вести кросс-функциональные инициативы с SRE, Data, Engineering и GRC
• Укреплять безопасность в облаках AWS и Kubernetes, расширяя охват на GCP
• Улучшать доступ к внутренней инфраструктуре: идентификация, доступ и аудиты
• Усовершенствовать деплой Kubernetes: безопасность кластера и рабочих нагрузок
• Развивать детектирование и реагирование через Datadog
• Расширять охват логирования и качество данных во всех слоях
• Создавать сценарии расследований и плейбуки для быстрого реагирования
• Сотрудничать с Data-командами для обнаружения подозрительных действий
• Повышать безопасность секретов в CI/CD и окружении выполнения
• Разрабатывать безопасные паттерны и автоматизацию, упрощающие путь к безопасности

Skills

AWS

Kubernetes

Datadog SIEM

Okta/IDP

Security operations

Incident response

CI/CD внедрение

IaC / Terraform

Cloud security

SRE взаимодействие

Tools

Datadog

Okta

Terraform

Job description

Описание

We power people’s progress. At Preply, we’re all about creating life-changing learning experiences. We help people discover the magic of the perfect tutor, craft a personalised learning journey, and stay motivated to keep growing. Our approach is human-led, tech-enabled - and it’s creating real impact. We’ve just reached unicorn status with a $150M Series D, accelerating our vision to transform education through human-led, AI-enhanced learning.

Задачи

• Own platform security across AWS, Kubernetes, and GCP, with a strong focus on detection, alerting, and incident response readiness
• Lead key platform security initiatives end-to‑end, from problem definition through rollout and iteration
• Act as a strong technical voice in defining how platform security is designed, implemented, and operated at Preply
• Evolve our monitoring from “we have a SIEM” to a detection and response capability that is effective, trusted, and actionable
• Work hands-on with our current tooling, including Datadog as our SIEM, Okta as our primary IdP, and a range of SaaS platforms
• Drive cross-functional platform security initiatives from problem definition to production rollout, partnering with SRE, Data, Engineering, and GRC
• Strengthen cloud and platform security across AWS and Kubernetes, with expanding scope in GCP, through practical guardrails, secure patterns, and automation
• Improve the robustness of access to internal infrastructure, including identity, privileged access, and auditability
• Improve security of Kubernetes deployments, including cluster and workload security, policy enforcement, and secure workload identity patterns
• Mature detection and response capability using Datadog
• Improve log coverage and data quality (cloud, Kubernetes, CI/CD, identity, and key SaaS)
• Build and tune actionable detections with clear severity, ownership, and expected frequency
• Reduce noise through correlation, deduplication, enrichment, and continuous tuning
• Establish repeatable triage workflows and clear escalation paths, being part of the Security on‑call rotations
• Create investigation playbooks and runbooks so alerts can be handled consistently and quickly
• Partner with Data teams to improve monitoring for suspicious activity and sensitive access patterns, with an emphasis on practical, high‑signal alerting
• Improve secrets management and reduce exposure risk across CI/CD and runtime
• Build security automation that makes the secure path the easy path for engineers

Требования

• Strong experience securing cloud and platform environments, especially AWS and Kubernetes, and the ability to extend that security approach into GCP
• Hands‑on experience driving and delivering technical security initiatives end‑to‑end in production environments
• Strong understanding of the software development lifecycle, and comfort working with CI/CD and infrastructure as code
• Practical experience improving identity and access security, with strong familiarity with Okta event monitoring and identity-focused detection patterns
• Experience building or maturing security operations capability, especially turning SIEM inputs into reliable operational outcomes (triage, runbooks, tuning, and measurable improvement)
• Experience improving logging coverage and signal quality, and building detections that are actionable rather than noisy (experience with Datadog SIEM is a plus)
• Strong collaboration skills and the ability to influence decisions across SRE, Data, Engineering, and GRC
• Business‑oriented mindset and comfort making cost‑benefit tradeoffs
• Strong communication skills.
• Minimum C1 English level.
• Willingness to participate in on‑call rotations and partner effectively with SRE during incidents.
• Будет плюсом: Terraform and infrastructure as code at scale; Jenkins hardening and CI/CD supply chain security controls; Cloudflare security controls (WAF, bot mitigation, edge protections); Scripting or programming for automation and tooling; Incident response experience in cloud-native environments (AWS and Kubernetes)

Условия

• An open, collaborative, dynamic and diverse culture
• A generous monthly allowance for lessons on Preply.com, Learning & Development budget and time off for your self-development
• A competitive financial package with equity and leave allowance
• The opportunity to unlock the potential of learners and tutors through language learning and teaching in 175 countries (and counting!)