Senior Security Architect

Verimatrix; München; On-site; EUR 120,000 - 170,000; Full time

Job summary

Verimatrix in Munich, Germany is seeking a Senior Security Architect to own cloud security across our AWS estate and set the standard for secure design. This hands-on role partners with platform and product teams to drive secure architecture and tooling decisions.

You will lead threat modelling, policy roadmapping, and secure SDLC practices, while mentoring engineers and shaping enterprise security posture for cloud services.

Qualifications

• 8+ years in security engineering, including at least 5 focused on cloud.
• Deep, practical expertise with the AWS security suite: IAM, KMS, Config, GuardDuty, CloudTrail, Security Hub, Inspector, WAF, and Shield Advanced.
• Strong infrastructure-as-code skills (Terraform) and scripting (Python, Go).
• Kubernetes and container security experience.
• Working knowledge of identity protocols (OIDC, OAuth 2.0, SAML) and applied cryptography.
• Experience with secure SDLC practices: threat modeling, secure design review, SAST/DAST, and penetration testing.
• Experience leading incident response.

Responsibilities

• Design and own security controls across AWS estate: IAM, network segmentation, encryption, logging, and secrets management.
• Lead threat modelling and security architecture reviews with development teams.
• Set cloud security policy and roadmap with security and platform leadership.
• Partner with Product Management to define security requirements.
• Build security into CI/CD: IaC scanning, container and base-image scanning, SBOM checks, policy-as-code, guardrails.
• Write and maintain Terraform modules and golden patterns.
• Drive adoption of automated security tooling and vulnerability scanning.
• Evaluate secure development tooling and AI coding guardrails.
• Improve detection for cloud-native attack paths and act as senior responder for incidents.
• Coordinate CSPM/CNAPP, DAST, and penetration testing programs; manage vulnerability remediation.
• Support ISO 27001, CRA, and lead third-party security reviews; mentor engineers on secure design.

Skills

Cloud security

AWS security

Terraform

Python

Kubernetes security

Identity protocols

Secure SDLC

Incident response

Security architecture

Tools

Terraform

AWS Inspector

GuardDuty

CloudTrail

WAF

Security Hub

Job description

Role Overview The Senior Security Architect will be accountable for the security of the cloud infrastructure behind those services: reporting to the...

Role Overview

The Senior Security Architect will be accountable for the security of the cloud infrastructure behind those services: reporting to the CTO, he/she sets the technical direction for cloud security across our AWS estate and define the standard that engineering teams build to. This is a hands-on senior role, positioned close to the platform and influential rather than supervisory.

Key Responsibilities

Architecture and design

• Design and own security controls across our AWS estate: IAM, network segmentation, encryption, logging, and secrets management.
• Lead threat modelling and security architecture reviews for new services and major changes, working one-to-one with development teams on secure design.
• Set cloud security policy and the security roadmap jointly with security and platform leadership.
• Partner with Product Management to define and clarify security requirements.

Role Overview

The Senior Security Architect will be accountable for the security of the cloud infrastructure behind those services: reporting to the CTO, he/she sets the technical direction for cloud security across our AWS estate and define the standard that engineering teams build to. This is a hands-on senior role, positioned close to the platform and influential rather than supervisory.

Key Responsibilities

Architecture and design

• Design and own security controls across our AWS estate: IAM, network segmentation, encryption, logging, and secrets management.
• Lead threat modelling and security architecture reviews for new services and major changes, working one-to-one with development teams on secure design.
• Set cloud security policy and the security roadmap jointly with security and platform leadership.
• Partner with Product Management to define and clarify security requirements.

Automation and secure-by-default engineering

• Build security into CI/CD: IaC scanning, container and base-image scanning, dependency and SBOM checks, policy-as-code, and automated guardrails.
• Write and maintain Terraform modules and golden patterns so that the secure path is the easy path for product engineers.
• Drive adoption of automated security tooling, including cloud-native vulnerability scanning and security agents (e.g. AWS Inspector).
• Evaluate and recommend secure development tooling, including IDE-integrated security and AI coding-assistant guardrails.

Detection and incident response

• Improve detection coverage for cloud-native attack paths.
• Act as senior responder for cloud security incidents: build and maintain runbooks, and run post-incident reviews that produce durable fixes.
• Assess the impact of vulnerabilities and exploits, and own the incident response process end to end.

Vulnerability and exposure management

• Manage CSPM/CNAPP tooling: triage findings and drive remediation with the owning teams.
• Analyze the impact of WAF rules on our products.
• Coordinate DAST and penetration testing programs across products.

Governance, compliance, and enablement

• Support ISO 27001 with evidence and control implementation.
• Support regulatory security obligations, including the EU Cyber Resilience Act (CRA).
• Lead security reviews of new third‑party tools.
• Mentor engineers on secure cloud design and act as security partner to the platform, product, and operations teams.

Qualifications

• 8+ years in security engineering, including at least 5 focused on cloud.
• Deep, practical expertise with the AWS security suite: Organizations and SCPs, KMS, Config, GuardDuty, CloudTrail, Security Hub, Inspector, WAF, and Shield Advanced.
• Strong infrastructure-as-code skills (Terraform) and scripting and automation (Python, Go).
• Kubernetes and container security experience.
• Working knowledge of identity protocols (OIDC, OAuth 2.0, SAML) and of applied cryptography and PKI: key hierarchies, certificate lifecycle, and secure key storage.
• Experience with secure SDLC practices: threat modeling, secure design review, SAST/DAST, and penetration testing.
• Experience leading incident response.
• Strong communication skills: you can influence engineering teams you do not manage and explain risk to non-security stakeholders in terms of business impact.

Nice to have

• Certifications such as AWS Certified Security - Specialty, AWS Certified Advanced Networking - Specialty, AWS Certified Solutions Architect - Professional, CISSP, or CCSP.
• Experience with media security, DRM, conditional access, or anti-piracy technologies.
• Knowledge of the EU Cyber Resilience Act and related product security regulations.
• Experience with HSMs and cryptographic key management.
• Familiarity with on-premises and cloud security tooling supporting the SDLC.

By submitting this form, I agree to the processing of my personal data for the purpose of processing my job application and replying to my request,

in compliance with Verimatrix's privacy notice

NEURA Robotics builds cognitive robots and AI systems that operate in the real world - and the security surface that comes with that is as complex as...

About DockerDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion...

What is The RoleAs a Security Specialist Solutions Architect, you will bring deep expertise in SIEM solutions, security technologies, and consultative...

What is The RoleAs a Security Specialist Solutions Architect, you will bring deep expertise in SIEM solutions, security technologies, and consultative...

AWS Applied AI Solutions (AAIS) is building toward a future where every business innovates with Amazon AI teammates. To get there, we build AI solutions...

AWS Applied AI Solutions (AAIS) is building toward a future where every business innovates with Amazon AI teammates. To get there, we build AI solutions...

Arcadis is the world's leading company delivering sustainable design, engineering, and consultancy solutions for natural and built assets. We are more...

We are seeking a Senior Cloud Security Architect to join our dynamic team in Germany. This role is ideal for a seasoned professional with a passion for...

As our Cyber Security Architect, you take technical ownership of information security across the EOS Group. Working at the intersection of global cloud...