security engineer in fintech

Enfint; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Free mental health coaching sessions

Employee stock options

30 annual vacation days

Work from abroad up to six weeks

Zusammenfassung

Enfint ищет специалиста по информационной безопасности для разработки и реализации архитектур безопасности в облаках (AWS/Azure/GCP) и защиты контейнерной инфраструктуры. В обязанности входит проектирование zero-trust и безопасных CI/CD процессов, а также защита AI/ML компонентов и сервис-люкарион.

Роль ориентирована на Berlin, с гибкой поддержкой инфраструктурных инициатив. Требуется 5+ лет в информационной безопасности, из которых 3+ в облаке, опыт с Docker/Kubernetes и IaC

Qualifikationen

• Опыт не менее 5 лет в информационной безопасности, из них не менее 3 лет в облачной безопасности.
• Не менее 3 лет практического опыта защиты контейнеризованных сред (Docker и Kubernetes).
• Опыт защиты AI/ML или систем на базе LLM.
• Глубокие знания одного из основных облачных провайдеров: AWS, Azure или GCP.
• Экспертные знания в области контейнерной и облачной безопасности, паттернов cloud-native.
• Опыт работы с Terraform и CloudFormation для IaC.
• Понимание сетевой безопасности, управления идентификацией и доступом.
• Знакомство с инструментарием облачной безопасности (Cloud Security Posture Management).
• Опыт в безопасности AI/ML и LLM, включая TensorFlow и PyTorch.

Aufgaben

• Разрабатывать и внедрять архитектуры безопасности для облачных платформ AWS, Azure и GCP.
• Реализовывать лучшие практики безопасности в контейнеризации и Kubernetes.
• Разрабатывать и поддерживать безопасные Infrastructure as Code кодовые базы.
• Проектировать и разворачивать zero-trust сетевые архитектуры и безопасные сервис-меш решения.
• Строить и поддерживать безопасные CI/CD пайплайны в рамках DevSecOps.

Kenntnisse

Cloud security

Kubernetes security

AI/ML security

Threat modeling

Incident response

CI/CD security

Zero-trust

Security automation

Python

Go

Tools

Docker

Kubernetes

Terraform

CloudFormation

TensorFlow

PyTorch

Jobbeschreibung

Описание

Taxfix develops an intuitive tax filing app that helps people file their taxes and claim refunds with confidence. The Taxfix Group operates across Germany, Spain, and the UK through the Taxfix, Steuerbot, and TaxScouts brands.

Задачи

• Design and implement security architectures for AWS, Azure, and GCP cloud platforms;
• Implement security best practices for container and Kubernetes deployments;
• Develop and maintain secure Infrastructure as Code codebases;
• Design and deploy zero-trust network architecture and secure service mesh solutions;
• Build and maintain secure CI/CD pipelines following DevSecOps principles;
• Secure AI-powered product features end to end, including context assembly, tool invocation, and output handling;
• Design and review security controls for RAG implementations;
• Secure agentic solutions and extension points, including MCP clients and servers, agent skills, scoped credentials, sandboxing, and human-in-the-loop gates;
• Build defenses against direct and indirect prompt injection and other adversarial inputs to LLM applications;
• Establish data security controls for sensitive data used in inference, retrieval, and fine-tuning;
• Lead incident response for cloud and AI infrastructure security incidents;
• Develop and implement security monitoring and detection strategies;
• Conduct threat modeling and risk assessments for cloud-native and AI systems;
• Perform regular security assessments of cloud infrastructure and container deployments;
• Create and maintain security documentation, including policies, procedures, and run-books;
• Collaborate with development, data science, and operations teams to integrate security;
• Communicate security requirements and recommendations to technical and non-technical stakeholders;
• Stay current with emerging threats and security trends in cloud-native and AI security;
• Participate in technology selections for security tooling and platforms.

Требования

• 5+ Years of experience in information security, including at least 3 years specializing in cloud security;
• 3+ Years of hands-on experience securing containerized environments with Docker and Kubernetes;
• Demonstrable hands-on experience securing AI/ML or LLM-based systems;
• Strong background in at least one major cloud provider: AWS, Azure, or GCP;
• Expert knowledge of container security, Kubernetes security, and cloud-native security patterns;
• Proficiency with Infrastructure as Code tools such as Terraform and CloudFormation;
• Strong understanding of network security, identity management, and access control;
• Experience with cloud security tooling, including Cloud Security Posture Management;
• Working knowledge of AI/ML and LLM security, including TensorFlow and PyTorch security implications;
• Proficiency in Python, Go, or Bash;
• Experience with security automation and orchestration;
• Nice to have: Deep experience securing LLMs and generative AI systems, familiarity with AI/LLM security frameworks such as OWASP LLM Top 10, AI governance or compliance experience, secure multi-tenant AI infrastructure experience, privacy-enhancing technologies for AI/ML, contributions to open-source security projects or public security research, experience building security tools or automation frameworks.

Условия

• Free mental health coaching sessions;
• Monthly allowance for an extensive range of services, with flexible rollover;
• Employee stock options for all employees;
• 30 Annual vacation days and flexible working hours;
• Work from abroad for up to six weeks every year;
• Free tax declaration filing through the Taxfix app and internal support for personal tax-related questions;
• Dogs are welcome in the office;
• The role is based in Berlin, Germany.