security engineer in digital banking

Enfint; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Work from home budget

Relocation package with visa support

Autonomy and cutting-edge tech

Zusammenfassung

N26 is seeking a Cloud Infrastructure Security leader in Berlin to drive the security roadmap for our AWS-based infrastructure. You will own initiatives, design cloud-native security solutions, perform threat modeling, and collaborate with product and engineering teams to strengthen our secure-by-default cloud platform.

Responsibilities include monitoring vulnerabilities, conducting penetration testing scopes, maintaining documentation, and leading on-call incident response.

Qualifikationen

• Strong understanding of AWS security and cloud-native security practices.
• Experience with security tooling and vulnerability management.
• Familiarity with threat modeling and ATT&CK frameworks.

Aufgaben

• Drive the Cloud Infrastructure Security roadmap with cross-functional alignment.
• Define and drive security initiatives and automated controls in AWS.
• Design and deploy cloud-native security solutions with data protection.
• Conduct threat modeling and coordinate mitigations with stakeholders.
• Monitor vulnerabilities and lead on-call security incidents.

Ausbildung

Master’s degree in cybersecurity

Bachelor’s degree in computer science

Advanced security certification

Tools

Terraform

CSPM/CNAPP

Kubernetes

CI/CD security tooling

Linux

Jobbeschreibung

Описание:

N26 has reimagined banking for today’s digital world by building a global digital banking platform. The company provides an elegant digital experience without physical branches, paperwork, and hidden fees.

Задачи:

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager;
• Own, define, and drive initiatives, solutions, processes, and frameworks to proactively identify and mitigate security threats within the AWS infrastructure;
• Design, deploy, and maintain cloud-native security solutions with end-to-end data protection, threat detection, automated controls, alerting, remediation, and continuous compliance;
• Research new attack vectors proactively;
• Conduct threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders;
• Monitor vulnerabilities, perform ongoing risk assessments, and collaborate with cross-functional teams to mitigate risks;
• Define penetration testing scopes and scenarios;
• Develop and maintain documentation with guidelines for strengthening security posture and ensuring secure cloud operations;
• Provide service to key stakeholders through the support portal;
• Participate voluntarily in the security incident response on-call rotation and lead security incidents.

Требования:

• Competent understanding and experience securing AWS cloud infrastructure, CI/CD pipelines, containerized environments, and Linux systems;
• Experience assessing security findings and mitigation strategies;
• Knowledge of STRIDE, MITRE ATT&CK®, OWASP, and other common security frameworks and tactics;
• Understanding of cloud data security challenges and best practices;
• Experience deploying and customizing security tools, including CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, and container runtime security;
• Proficiency with CI/CD pipelines such as Terraform for automated security testing and change management;
• Hands-on experience with virtual machines, containers, Kubernetes, serverless technologies, and infrastructure as code;
• Proficiency in Python, Bash, or Go for scripting and automation;
• Experience with ethical hacking and penetration testing methodologies;
• Familiarity with agile methodologies and project management;
• Ability to collaborate across teams and segments to achieve complex objectives;
• Hands‑on attitude and ability to drive solutions to completion;
• Excellent oral and written communication skills;
• Growth mindset focused on learning and advancing the team;
• Master’s degree in cybersecurity or a related field, or Bachelor’s degree in computer science or a related field with an advanced security certification;
• Nice to have: Contributions to the security community through open-source tools, research papers, conference talks, or similar activities.

Условия:

• Competitive personal development budget;
• Work from home budget;
• Discounts for fitness and wellness memberships;
• Language app and public transportation benefits;
• Premium subscription for the employee’s personal N26 bank account;
• Subscriptions for friends and family members;
• Additional day of annual leave for each year of service;
• High degree of autonomy and access to cutting-edge technologies;
• Relocation package with visa support.