Cloud security engineer in fintech

GoDutch; Amsterdam; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Гибридный режим работы

Job summary

GoDutch ищет Cloud Security Engineer в Амстердаме. Вы станете первым инженером по безопасности в инженеринговой команде и зададите основы безопасной архитектуры для новой платформы финансовых сервисов.

Компания предлагает гибридный график в офисе на Рокин и возможность влиять на выбор инструментов и практик безопасности, работая напрямую с CPTO, Head of Engineering и Chief Compliance & Risk Officer.

Qualifications

• Опыт ≥5 лет в области облачной безопасности.
• Экспертные знания IAM, политик, KMS, централизованного логирования.
• Опыт CSPM/CNAPP и секюрити posture management.
• Опыт обеспечения Kubernetes и IaC безопасностью.
• ЗнанияThreat detection, инцидент-реагирования.
• Опыт интеграции безопасности в CI/CD (Argo CD).
• Знания DORA, ISO 27001, CIS Controls, GDPR.
• Опыт взаимодействия с MSP/партнёрствами и сильные коммуникативные навыки.
• Свободный английский; право работать в Нидерландах.

Responsibilities

• Владение безопасностью Google Cloud: IAM, политики, KMS, логирование.
• Укрепление Kubernetes и разделение между сервисами с минимальным привилегированием.
• Защита событийной и оркестровочной инфраструктуры (Kafka, Temporal).
• Рецензирование дизайна и API на безопасность; контроль SDLC.
• Построение дашбордов по угрозам для менеджмента и совета директоров.
• Внедрение безопасных gates в CI/CD и GitOps (Argo CD).
• Проведение моделирования угроз и обеспечение реагирования на инциденты.
• Координация тестирования на проникновение; контроль корректировок.
• Перевод политик в реализуемые меры и evidence для аудита.
• Управление реестром ИТ-активов и уязвимостями; взаимодействие с поставщиками.

Skills

Cloud security

IAM

KMS

CSPM/CNAPP

Kubernetes security

IaC security

CI/CD security

Threat modelling

English (fluent)

Tools

Argo CD

SIEM

EDR

Job description

Описание:

GoDutch is looking for a Cloud Security Engineer (GCP) to become the first dedicated security engineer in its Engineering team, based in Amsterdam. GoDutch is a Dutch fintech platform used by more than 15,000 SMEs and growing fast. Business accounts, cards, invoicing, bookkeeping and payments sit in one app. The engineering team is rapidly growing, senior and close to the product. You will work directly with the CPTO, the Head of Engineering and the Chief Compliance & Risk Officer. Your work is visible from day one: you set the security baseline that the new platform and every future engineer will build on.

Задачи:

Own the security posture of GoDutch's Google Cloud organisation: IAM, org policies, VPC Service Controls, KMS and secrets, logging and cloud posture management. Harden the Kubernetes environment that hosts the banking platform, including workload isolation and least-privilege access between services. Secure the event and orchestration layer (Kafka, Temporal, Apache Camel) and the data platform (BigQuery), including encryption, access and data residency. Review and advise on the security of system designs, partner integrations and APIs (core banking, card processing, payments, KYC/KYB). Build and maintain security dashboards that give management and the board a clear view of cloud assets and posture. Work with engineering and the platform partner to embed security gates into CI/CD and GitOps (Argo CD): SAST, dependency and container scanning, IaC policy checks, secrets detection. Establish secure development guidelines for Java/Quarkus and TypeScript services, and support teams in adopting them. Run threat modelling for new features and integrations that move money or handle customer data. Configure and tune threat detection, alerting and response playbooks across cloud workloads, observability and endpoints. Participate in incident response, including security investigation and input for DORA major-incident classification and reporting. Contribute security scenarios to business continuity and disaster recovery testing. Coordinate penetration tests and, where in scope, threat-led testing; track findings to closure. Turn GoDutch's information security policies and standards into implemented, evidenced controls, against CIS Controls, ISO 27001 and DORA. Maintain the ICT asset register and vulnerability management process, and feed the GRC platform with control evidence. Assess the ICT security of third-party providers and support the Register of Information and contract requirements under DORA. Prepare evidence and answers for regulators, auditors and partner due diligence Coordinate with GoDutch's managed service providers and external security partner, holding them to agreed scope and quality. Run security training and awareness for engineering and the wider company. Track security metrics and report on posture improvements to the CPTO and management. Stay current with emerging threats and recommend tools and practices that fit a lean team.

Требования:

Proven experience in cloud security (typically 5+ years in security or platform engineering). Expert knowledge of cloud security: IAM, org policies, network perimeter controls, KMS, centralised logging. Hands-on experience with cloud security posture management (CSPM/CNAPP) tooling. Experience securing Kubernetes workloads and Infrastructure as Code. Knowledge of threat detection, vulnerability management and incident response, with SIEM/EDR tooling. Experience embedding security into CI/CD pipelines. Working knowledge of regulatory and control frameworks relevant to financial services: DORA, ISO 27001, CIS Controls, GDPR. Experience working with, and holding to account, managed service providers or external security partners. Strong communication skills, and the ability to explain security risk to engineers, management and supervisors alike. Fluent English; eligible to work in the Netherlands. Будет плюсом: Security certifications (e.g. CISSP, CCSP, Google Professional Cloud Security Engineer, GIAC); Experience at a licensed payment institution, EMI or bank, ideally under DNB or ECB supervision; Experience with DORA ICT risk management, third-party risk or threat-led penetration testing (TIBER/TLPT); Familiarity with card (PCI DSS) and payments security, including SEPA and PSD2 strong customer authentication; Experience with event-driven architectures (Kafka, Temporal) and securing service-to-service communication; Experience with zero-trust access and identity platforms; Experience with a GRC platform and automated control evidence; Knowledge of secure coding and application security testing (SAST/DAST) for Java and TypeScript

Условия:

You will be the first dedicated security engineer, setting the security architecture of a challenger finance platform rather than inheriting one. You will protect the money and administration of thousand of users. You will work with a modern cloud-native stack and have real influence over which security tools and practices are adopted. You will work directly with the CPTO, engineering leadership and compliance, with short decision lines. You will help GoDutch scale securely in a competitive market, and can grow the security function with it as the team expands. Amsterdam office on the Rokin, with a hybrid way of working