Cloud security engineer in fintech

BUX; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Дежурство по кибербезопасности

Job summary

BUX в Амстердаме ищет старшего инженера по кибербезопасности облаков (GCP). Ваша роль — укреплять безопасность, внедрять контрольные панели и наставлять команды в вопросах DevSecOps. Требуется опыт работы с SCC Enterprise и управлением инцидентами.

Кандидат обладает экспертизой в GCP, SIEM/SOAR и регуляторных требованиях. Ожидается взаимодействие с командами разработки для безопасности в CI/CD, а также развитие стандартов и практик безопасности.

Qualifications

• Опыт уровня Senior/Staff в облачной безопасности.
• Глубокие знания GCP и SCC Enterprise.
• Опыт работы с SIEM/SOAR и управлением угрозами.
• Знание CSPM и отраслевых регламентов (SOC 2, ISO 27001, GDPR, DORA).
• Опыт IaC безопасности (Terraform, Kubernetes).

Responsibilities

• Укреплять позицшию безопасности BUX через управление рисками и улучшения.
• Развернуть и поддерживать SCC Enterprise в GCP.
• Настраивать мониторинг безопасности, детекцию угроз и оповещения.
• Проводить оценки уязвимостей и аудит соответствия.

Skills

Cloud security

GCP security

SCC Enterprise

SIEM/SOAR

Threat detection

IaC security

Terraform

Kubernetes

Communication skills

Tools

Terraform

Kubernetes

SCC Enterprise

Job description

Описание

We are looking for a Senior Cloud Security Engineer (GCP) to join our BUX team based in Amsterdam. Our engineering team sits at the heart of the company. We have a well-rounded team that cares about building great products that matter. You'll be part of a modern fintech company where you can try things, break things, fix them, and learn fast. Your work is visible, your input matters, and you help shape both the product and how we build it.

Задачи

• Strengthen the BUX security posture through proactive risk management and continuous improvement
• Implement and manage Google Cloud Security Command Center Enterprise
• Configure and maintain security monitoring, threat detection and alerting
• Conduct regular security assessments and vulnerability scans
• Develop and maintain security dashboards for visibility across cloud assets
• Implement and maintain security standards across the organisation
• Define and document security policies, standards and best practices
• Establish secure development guidelines and support teams in adoption
• Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)
• Work with the platform team to integrate security into CI/CD pipelines
• Support engineering teams with security questions, issues and guidance
• Act as the security subject matter expert for development teams
• Review and advise on security aspects of system designs and architectures
• Assist with security incident investigation and response
• Provide security training and awareness programs for engineering staff
• Manage cloud security operations
• Configure and tune threat detection rules and security alerts
• Develop automated response playbooks for common security scenarios
• Monitor and respond to security findings, vulnerabilities and misconfigurations
• Coordinate with external security partners and auditors as needed
• Stay current with emerging threats, vulnerabilities and security technologies
• Evaluate and recommend security tools and solutions
• Track security metrics and report on security posture improvements

Требования

• Senior / Staff level experience in cloud security
• Expert knowledge of Google Cloud Platform (GCP) security
• Hands‑on experience with Google Cloud Security Command Center Enterprise (SCC Enterprise)
• Strong knowledge of SIEM/SOAR platforms and security operations
• Experience with cloud security posture management and compliance frameworks
• Knowledge of threat detection, vulnerability management and incident response
• Understanding of regulatory compliance requirements (e.g., SOC 2, ISO 27001, GDPR, DORA)
• Experience with Infrastructure as Code security (Terraform, Kubernetes)
• Strong communication skills to collaborate across engineering teams
• Ability to translate complex security concepts for technical and non‑technical audiences

Будет плюсом:

• Security certifications (e.g., CISSP, CCSP, GCSA, GIAC)
• Experience with AWS or Azure in addition to GCP
• Knowledge of DevSecOps practices and tooling
• Experience with container security and Kubernetes security best practices
• Familiarity with penetration testing and ethical hacking techniques
• Experience in regulated industries, particularly fintech or financial services
• Knowledge of secure coding practices and application security testing (SAST/DAST)

Условия

• You will shape the security strategy for a high-growth fintech company that impacts millions of users
• You will work with modern cloud technologies and have the freedom to introduce security tools and practices
• You will collaborate with intelligent, passionate peers who value security and continuous improvement
• You will be part of a company that values your ideas and encourages innovation at every level
• You will help build secure products that democratize investing and make a real difference in people's financial lives
• You will have the opportunity to establish security best practices from the ground up as we scale
• Includes on-call duties for security incidents