Senior Cloud Security Engineer

N26 Inc.; España; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Relocation package with visa support

Work from home budget

Premium subscriptions for personal use

Job summary

N26 Inc. is seeking a Senior Cloud Security Engineer to lead proactive security for our AWS-based platform. You will partner with Platform and Data teams to safeguard customer data and drive security maturity.

Responsibilities include designing cloud-native security solutions, automating controls, and leading on-call incident responses to protect the organisation’s cloud infrastructure.

Qualifications

• Extensive experience securing AWS environments, CI/CD pipelines, containers and Linux.
• Ability to lead threat modeling, risk assessment and incident response.
• Familiarity with STRIDE, MITRE ATT&CK, and OWASP frameworks.

Responsibilities

• Drive the Cloud Infrastructure Security function roadmap with product and engineering peers.
• Design, deploy and maintain cloud-native security solutions with automated controls.
• Lead threat modeling, vulnerability management and incident response.
• Perform proactive research to detect new attack vectors.

Skills

Cloud Security

Risk Assessment

Security Savvy

Data Security

Automation Pro

Cloud Deployment

Scripting Skills

Ethical Hacker

Agile Mindset

Collaborative Spirit

Hands-On

Communicator

Growth-Driven

Community Contributor

Education

Master's degree in cybersecurity

Bachelor's degree in computer science with security certification

Tools

Terraform

CSPM/CNAPP

Vulnerability scanners

IDS/IPS

KSPM

Container runtime security

Job description

About the opportunity

Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our organisation.

At the company, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our the company tech teams to thrive.

Once here you will

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.

• Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security maturity.

• Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure.

• Perform regular and proactive research to detect new attack vectors.

• Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholders

• Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.

• Define the pentesting scope and scenarios.

• Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the organisation.

• Provide a first class service to our main stakeholders in our support portal

• Be part of our security incident response on-call rotation (voluntary) and lead security incidents

What you will bring along

• Cloud Security: Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.

• Risk Assessment: Experience with assessing security findings and mitigation strategies

• Security Savvy: Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP.

• Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments.

• Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)

• Automation Pro: Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management.

• Cloud Deployment: Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.

• Scripting Skills: Proficiency in Python, Bash, or GO for scripting and automation.

• Ethical Hacker: Experience with ethical hacking and penetration test methodologies.

Teamwork & Collaboration

• Agile Mindset: Familiarity with agile methodologies and project management.

• Collaborative Spirit: Demonstrated ability to collaborate across teams and segments to achieve complex objectives.

• Hands-On: A hands-on attitude with a knack for driving solutions to completion.

• Communicator: Excellent oral and written communication skills.

• Growth-Driven: A growth mindset focused on learning and pushing the team forward.

• Community Contributor: Contributions to the security community, such as open-source tools, research papers, conference talks, etc.

• Educational Background: A Master's degree in cybersecurity or a related field or a Bachelor's degree in computer science or a related field with an advanced security certification.

If you're ready to embark on a thrilling journey in the world of IT security and make a meaningful impact, we want to hear from you! Join our team at the company and help us protect what matters most.

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors.

• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.

• As an the company employee you will have access to a Premium subscription on your personal the company bank account. As well as subscriptions for friends and family members.

• Additional day of annual leave for each year of service.

• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.

• A relocation package with visa support for those who need it.

Who we are

the company has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.

We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do.

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.

Equal Opportunities:

We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.

We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to Visit our website to learn more about Diversity, Equity, & Inclusion at the company.