Senior Security Engineer

Lunar; Aarhus; Hybrid; DKK 900,000 - 1,100,000; Full time

Benefits offered by this job

In-office 4 days per week

Modern workspace equipment

Pension & health insurance

Enhanced parental leave

Job summary

Lunar, a Nordic fintech, is seeking a Senior Security Engineer to own security across AWS, Kubernetes and CI/CD. You’ll drive incident response, RBAC and IAM improvements, and help secure AI-enabled solutions in a fast-growing fintech setting.

You’ll collaborate across squads, influence security posture, and enable secure innovation with modern cloud tech while staying compliant with relevant frameworks.

Qualifications

• What matters is hands-on security experience across cloud and container platforms.
• 3+ years in Security Engineering, DevSecOps, SRE or similar roles.
• Familiarity with RBAC, IAM, and secure cloud-native design.

Responsibilities

• Harden security across AWS, Kubernetes and CI/CD pipelines.
• Assess security findings and drive remediation across cloud and endpoints.
• Contribute to compliance with GDPR, AI Act, ISO27001 and related standards.
• Coordinate external penetration tests and communicate results.
• Explore AI safety implications and secure AI adoption.

Skills

Cloud security

AWS

Kubernetes

Terraform

GitOps

RBAC

Tools

AWS

Kubernetes

Terraform

GitHub Actions

Job description

Banking hasn't changed much in decades. We're changing that. One product at a time. Lunar is a Nordic challenger bank building the future of financial life with AI at the core. Our engineers, designers, and product people work on problems that actually matter. Making money simpler, smarter, and more rewarding for a million of registered users across the Nordics.

Fully licensed and founded in 2015, with offices in Copenhagen, Aarhus and Stockholm.

We move fast, we build with purpose, and we're just getting started.

As a Senior Security Engineer, you will be part of Squad Gravity, our dedicated security team based in Aarhus. You will own and drive security across a broad surface; including cloud and endpoint protection, enabling secure use of AI solutions, incident response, compliance and detection engineering. You won't just advise from the sidelines. You will be hands-on, building the defences, responding to real threats, and shaping the security posture of a Nordic fintech going to the moon. Squad Gravity is part of the innovation, not the typical "department of no" that you see in other organisations. Our mission statement is “Building Trust at Scale through Frictionless Security”. As such, your goal is to enable secure innovation and fast pace with smart use of AI and modern cloud technology.

Responsibilities

• Cloud, Infrastructure & CI/CD: Engineer and harden security across AWS, Kubernetes and Github Actions.
• AI & Automation: Help us understand and address the security implications and explore how AI can make our own security work smarter.
• Security Findings & Remediation: Assess and remediate security findings across AWS, Kubernetes, and employee endpoints - spanning critical vulnerabilities such as React2Shell to RBAC privilege escalation vulnerabilities.
• Compliance & Policy: Contribute to gap analysis of regulation or compliance frameworks such as DORA, GDPR, AI Act, ISO27001 and similar.
• Penetration Testing: Coordinate external penetration tests, communicate findings to stakeholders, and drive remediation of results.

Who are you?

You are someone who thrives in a role where no two weeks look the same. You are equally comfortable digging into a Kubernetes RBAC vulnerability as you are drafting an encryption policy or investigating a phishing campaign. You take ownership, communicate clearly, and know when to go deep versus when to move fast.

We know this is a broad role and we don't expect you to be an expert in everything from day one. What matters is that you are strong in some of these areas and genuinely curious to grow in the others. As such, if you are a strong DevSecOps/SRE/Platform Engineer profile, with an interest in Security and Security Engineering, don't hesitate to apply.

We Are Looking For People With The Following Experience

• Cloud Engineering and Security: Hands-on experience with AWS and Kubernetes. You should be comfortable using technologies like Terraform for AWS and GitOps for Kubernetes. Furthermore, you should be well-versed in designing secure cloud-native applications using modern best practices.
• AI Readiness: You don't need to be an AI engineer, but you have experience with Claude Code and working with agentic solutions. You understand how these AI tools work and how they change the security landscape.
• Identity & Access Management: Experience with SAML, OIDC and similar protocols and technologies in a corporate environment. Experience with RBAC, least privilege access models, and identity management in cloud environments.
• Communication & Soft Skills: You can explain security concepts to both engineers and non-technical stakeholders. You have strong soft skills and know how to influence others effectively without being seen as the typical "security gatekeeper".
• Experience: 3+ years in Security Engineering, DevSecOps, SRE, Platform Engineering, or a similar role, ideally in a tech-driven or regulated environment.

What you get.

• 4 days in the office. We're a team that builds together, thinks together, and moves together. Showing up is part of how we work.
• A well-equipped workspace. You’ll have a modern computer and a comfortable desk setup. We want you to have the tools you need to do your best work.
• Pension, health insurance, and enhanced parental leave. From your financial future to your family moments. We've got you covered.

While you hold on tight for us to get back to you, curious to see what we’re up to? Follow us on LinkedIn for business announcements and releases, check out our Instagram for an inside scoop on what it’s like to work here .

Depending on the regulations in the country where you will be employed, we will ask to see or obtain information about your criminal record. Please note that our employment is conditional upon you not being registered in RKI (Ribers Kredit Information). We welcome applications from candidates of all backgrounds. If you need any adjustments during the recruitment process, please let us know