Senior Security Architect

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a seasoned security engineering professional to advance our cloud security program. You will implement secure architecture across AWS and Azure, drive CNAPP/CSPM initiatives, and partner with SecOps to integrate with MSSP and SOAR workflows.

You will embed security into development pipelines, manage vulnerability programs, and push for zero trust adoption across engineering and product teams. Strong scripting, container security, and encryption expertise are essential.

Qualifikationen

• Bachelor’s degree in a technical field or equivalent job experience.
• Minimum of 6+ years of industry experience.
• Experience in cybersecurity, cloud security, or security engineering.
• Relevant certifications (e.g. CISSP, CEH, GIAC, ISSAP).
• Hands‑on experience securing AWS and/or Azure environments.
• Working knowledge of CNAPP/CSPM platforms.
• Experience with vulnerability scanning, remediation tracking, and patch management processes.
• Familiarity with application security principles (SAST, DAST, secure SDLC).
• Experience with IAM, PAM, and access governance concepts.
• Exposure to SIEM and security monitoring integration.
• Knowledge of Zero Trust architecture principles.
• Understanding of network segmentation, VPN, Conditional Access, and cloud networking fundamentals.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Terraform).
• Familiarity with container security technologies (Docker, Kubernetes) and infrastructure as code (IaC) tooling.
• Knowledge of encryption and key management practices.
• Strong communication skills and ability to work with both technical and non‑technical stakeholders.

Aufgaben

• Support the implementation of secure architecture patterns across AWS and Microsoft Azure environments.
• Support deployment and operationalization of CNAPP/CSPM platform.
• Drive cloud security posture improvements by integrating CNAPP with Cloud-native tools.
• Partner with Security Operations to automate and integrate with MSSP and SOAR automation response principles.
• Partner with engineering and development teams to embed application security controls into development and deployment pipelines.
• Lead and support vulnerability management and patching programs across infrastructure and applications.
• Contribute to security architecture reviews, threat modeling, and design validation.
• Support implementation and optimization of IAM, PAM, and least-privilege access models.
• Collaborate with SecOps team to integrate telemetry into SIEM platforms for monitoring and detection.
• Support in the development and maintenance of secure configuration baselines and reference architectures.
• Help drive patching strategy for servers, endpoints, and cloud workloads.
• Conduct architecture reviews and document security requirements.
• Partner directly with engineering leaders to bake security into product roadmaps.
• Stay up-to-date with the latest security trends, threats, and technologies to continuously improve security posture.
• Help drive a culture of zero trust security across engineering, development, and product teams.

Kenntnisse

Cloud security

CNAPP/CSPM

IAM/PAM

Zero Trust

Threat modeling

Scripting

Python

Terraform

Docker

Kubernetes

Security architecture

Vulnerability management

SIEM integration

Encryption/Key management

Networking fundamentals

VPN/CA/CA

Automation

Communication

Ausbildung

Bachelor's degree in a technical field

Tools

AWS

Azure

Terraform

Docker

Kubernetes

SIEM

Jobbeschreibung

Responsibilities

• Support the implementation of secure architecture patterns across AWS and Microsoft Azure environments.
• Support deployment and operationalization of CNAPP/CSPM platform.
• Drive cloud security posture improvements by integrating CNAPP with Cloud-native tools.
• Partner with Security Operations to automate and integrate with MSSP and SOAR automation response principles.
• Partner with engineering and development teams to embed application security controls into development and deployment pipelines.
• Lead and support vulnerability management and patching programs across infrastructure and applications.
• Contribute to security architecture reviews, threat modeling, and design validation.
• Support implementation and optimization of IAM, PAM, and least-privilege access models.
• Collaborate with SecOps team to integrate telemetry into SIEM platforms for monitoring and detection.
• Support in the development and maintenance of secure configuration baselines and reference architectures.
• Help drive patching strategy for servers, endpoints, and cloud workloads.
• Conduct architecture reviews and document security requirements.
• Partner directly with engineering leaders to bake security into product roadmaps.
• Stay up-to-date with the latest security trends, threats, and technologies to continuously improve security posture.
• Help drive a culture of zero trust security across engineering, development, and product teams.

Requirements

• Bachelor’s degree in a technical field or equivalent job experience.
• Minimum of 6+ years of industry experience.
• Experience in cybersecurity, cloud security, or security engineering.
• Relevant certifications (e.g. CISSP, CEH, GIAC, ISSAP).
• Hands‑on experience securing AWS and/or Azure environments.
• Working knowledge of CNAPP/CSPM platforms.
• Experience with vulnerability scanning, remediation tracking, and patch management processes.
• Familiarity with application security principles (SAST, DAST, secure SDLC).
• Experience with IAM, PAM, and access governance concepts.
• Exposure to SIEM and security monitoring integration.
• Knowledge of Zero Trust architecture principles.
• Understanding of network segmentation, VPN, Conditional Access, and cloud networking fundamentals.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Terraform).
• Familiarity with container security technologies (Docker, Kubernetes) and infrastructure as code (IaC) tooling.
• Knowledge of encryption and key management practices.
• Strong communication skills and ability to work with both technical and non‑technical stakeholders.