Security engineer in cloud infrastructure

Yoummday GmbH; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

30 days leave

Lunch allowance €69/mo

Givve Card €50/mo

Wellpass membership

Pension & capital-forming benefits

Hybrid/remote work

Workation up to 2 weeks in EU

Zusammenfassung

Yoummday GmbH is seeking a Senior Security Engineer to own security architecture in our Azure environment. You will implement guardrails using Terraform, enhance detections with the SIEM team, and drive vulnerability management across hybrid cloud and on-premises stacks.

You will also contribute to AI-assisted security tooling and AI risk considerations. The role emphasizes hands-on engineering, cross-team collaboration, and proactive problem solving in a fast-paced, hybrid work setting across

Qualifikationen

• Five+ years experience in security engineering.
• AZ-500 or equivalent practical expertise.

Aufgaben

• Own security architecture and controls across Azure environment.
• Implement guardrails in Terraform and maintain them.
• Develop and improve detections with Security Analyst.
• Manage vulnerability monitoring across hybrid cloud and on-premises stack.
• Contribute to AI/LLM security and AI-assisted tooling.

Kenntnisse

Azure security

Security architecture

SIEM

RBAC

PIM

English communication

Threat modeling

AI-assisted development

Security ownership

Tools

Terraform

Claude Code

Tenable

Microsoft Defender Vulnerability Management

PowerShell

Python

Django

Jobbeschreibung

Описание:

Do you want to do more than just write security concepts - and put your decisions into practice directly? Do you see cloud security not as a compliance checklist, but as the combination of threat modeling, Infrastructure as Code, and genuine hands-on engineering? Then we are looking for you to join our CISO team as a Senior Security Engineer (m/f/d)

Задачи:

You will take technical ownership of the security architecture and controls across our Azure environment - from Defender for Cloud and Microsoft Sentinel to Log Analytics. You will build and maintain the corresponding guardrails directly in Terraform. You will develop and continuously improve our detections in close collaboration with our Security Analyst, who is responsible for day-to-day SIEM monitoring and triage. You will work as a well-coordinated team rather than in separate silos. You will further develop our vulnerability management and monitoring across a hybrid environment. This includes our growing cloud landscape as well as the existing on-premises stack for as long as the migration is ongoing. You will contribute your expertise beyond cloud security, including identity, endpoint security, application security, incident response, and AI. Using your security engineering skills, you will, for example, develop tooling for AI-assisted penetration testing within our team and translate it into practical, scalable processes. You will use tools such as Claude Code to build and maintain internal security tools and automations. At the same time, you will help us identify AI-specific risks early—from the secure use of AI coding assistants to prompt injection.

Требования:

You have at least five years of experience in security engineering and several years of hands-on experience implementing Azure security. You hold an AZ-500 certification or have equivalent practical expertise. You can confidently read, write, and further develop security-related Terraform code. You have practical experience with Entra ID, RBAC, and PIM, as well as solid knowledge of network security, SIEM, and detection engineering. You do not just design security controls -you implement and operate them in practice. When you identify a problem, you do not wait for a ticket; you take ownership and develop a solution. You share knowledge and responsibility and work closely with the team on areas of joint ownership. You communicate confidently and professionally in English.

• SC-100, CISSP, CCSP, or Security+ certifications are a plus
• Experience with Python, Django, PowerShell, or AI-assisted development is a plus
• Ideally, you have experience with traditional or AI-assisted penetration testing and with tools such as Tenable or Microsoft Defender Vulnerability Management
• German is a plus, but not a requirement
• Experience with an ongoing cloud migration and AI/LLM security is welcome, but not essential

Условия:

In addition to 30 days of annual leave, we offer a monthly lunch allowance of €69, a Givve Card topped up with €50 every month, or alternatively a subsidised Wellpass membership. You’ll also benefit from discounts through Corporate Benefits, the option to lease a JobRad bike, contributions towards occupational pension schemes and capital-forming benefits (bAV & VL), as well as fantastic team and company events. Enjoy a flexible, hybrid working model, combining work from one of our modern, dog-friendly offices with the flexibility to work remotely. You’ll also have the opportunity to enjoy up to two weeks of workation per year within the EU (available only for employees holding an EU passport). Join a profitable company where you’ll have the freedom and trust to shape our future and work with us to redefine the future of work. We pride ourselves on an open and authentic culture and a high-performing team with a great sense of humour. From day one, you’ll have the chance to take ownership, drive innovation, and grow both professionally and personally alongside a team of experts, contributing to the continued development of both the company and yourself.