Senior Security Engineer (m/f/d)

Yoummday GmbH; Sarpsborg; Hybrid; NOK 931,000 - 1,241,000; Full time

Benefits offered by this job

25 days vacation

Meal vouchers

Multisport Card

Medical and dental care

Team events

Hybrid work model

Job summary

yoummday GmbH is seeking a Senior Security Engineer (m/f/d) to join our CISO team in a hybrid setup in Sofia, Bulgaria. You will own security architecture across Azure, implement guardrails with Terraform, and drive hands-on security improvements with a small, collaborative team.

The role emphasizes practical threat modeling, vulnerability management, and AI-assisted security tooling. English is required; German is a plus.

Qualifications

• At least five years in security engineering with hands-on Azure security.
• AZ-500 or equivalent practical expertise.
• Experience with Defender for Cloud, Microsoft Sentinel and Log Analytics.
• Terraform code development for security guardrails.
• Knowledge of Entra ID, RBAC, and PIM; SIEM knowledge.

Responsibilities

• Own security architecture and guardrails across Azure environment with Terraform.
• Develop detections in collaboration with the Security Analyst and SIEM team.
• Advance vulnerability management for hybrid cloud and on-premise.
• Contribute to security beyond cloud including identity, endpoint, and app security.
• Develop AI-assisted security tooling and safe AI usage practices.
• Communicate in English; German is a plus.

Skills

Azure Security

Terraform

Identity & Access

Detection Engineering

Vulnerability Management

Penetration Testing

AI Security Tools

Education

AZ-500 Certification

SC-100

CISSP

CCSP

Security+

Tools

Terraform

Python

Django

PowerShell

Claude Code

Microsoft Defender

Job description

We’re not just solving problems – we’re making days. Join us in revolutionizing customer experience as part of a fast-growing, tech-driven team. Become a daymaker.

Employment Type

Full time

Location Type

Hybrid

Department

Finance & Legal Cyber Security / CISO

Your Mission

Do you want to do more than just write security concepts - and put your decisions into practice directly? Do you see cloud security not as a compliance checklist, but as the combination of threat modeling, Infrastructure as Code, and genuine hands-on engineering? Then we are looking for you to join our CISO team as a Senior Security Engineer (m/f/d) in a hybrid working model in Sofia, Bulgaria.
You will join a three-person team where responsibility is genuinely shared: no ticket queues and no “that’s not my area.” We plan together, cover for one another, and usually implement and operate the security controls we design ourselves. This means you will see the impact of your work immediately - not at some point in the distant future.

Your Responsibilities

Security Architecture & Cloud Guardrails: You will take technical ownership of the security architecture and controls across our Azure environment - from Defender for Cloud and Microsoft Sentinel to Log Analytics. You will build and maintain the corresponding guardrails directly in Terraform.

Detection Engineering: You will develop and continuously improve our detections in close collaboration with our Security Analyst, who is responsible for day-to-day SIEM monitoring and triage. You will work as a well-coordinated team rather than in separate silos.

Vulnerability Management: You will further develop our vulnerability management and monitoring across a hybrid environment. This includes our growing cloud landscape as well as the existing on-premises stack for as long as the migration is ongoing.

Security Beyond the Cloud: You will contribute your expertise beyond cloud security, including identity, endpoint security, application security, incident response, and AI. Using your security engineering skills, you will, for example, develop tooling for AI-assisted penetration testing within our team and translate it into practical, scalable processes.

AI-Assisted Engineering: You will use tools such as Claude Code to build and maintain internal security tools and automations. At the same time, you will help us identify AI-specific risks early—from the secure use of AI coding assistants to prompt injection.

Your Skillset

Azure Security & Certifications: You have at least five years of experience in security engineering and several years of hands-on experience implementing Azure security. You hold an AZ-500 certification or have equivalent practical expertise. SC-100, CISSP, CCSP, or Security+ certifications are a plus.

Infrastructure & Automation: You can confidently read, write, and further develop security-related Terraform code. Experience with Python, Django, PowerShell, or AI-assisted development is a plus.

Identity & Detection: You have practical experience with Entra ID, RBAC, and PIM, as well as solid knowledge of network security, SIEM, and detection engineering.

Offensive Security & Vulnerability Management: Ideally, you have experience with traditional or AI-assisted penetration testing and with tools such as Tenable or Microsoft Defender Vulnerability Management.

Hands-On Mindset: You do not just design security controls -you implement and operate them in practice. When you identify a problem, you do not wait for a ticket; you take ownership and develop a solution.

Collaboration & Communication: You share knowledge and responsibility and work closely with the team on areas of joint ownership. You communicate confidently and professionally in English. German is a plus, but not a requirement.

Experience with an ongoing cloud migration and AI/LLM security is welcome, but not essential. What matters to us is what you can genuinely do - substance beats buzzword bingo.

Your Winning Deal

Your benefits: In addition to 25 days of vacation, we offer meal vouchers, a subsidized Multisport Card, medical and dental care, and great team and company events.

Your workplace: You will work in a flexible, hybrid model and have the opportunity to work from abroad within the EU for 2 weeks a year (*only applies to employees with an EU passport).

Your footprint: A role in a profitable company where you have the freedom and trust to help shape the business and work with us on the “future of work”. You will help ensure the secure use of modern AI technologies in a company that uses AI both in its products and in its own security automation. What you build will have an immediate impact.

The values: We offer an open, authentic culture and a high-performing team with a sense of humor, already looking forward to making bold decisions with you and exploring new paths to sustainable success. Responsibility is truly shared here. You will work in a small team with direct communication, honest conversations, and colleagues who step in for one another.

Your opportunity: We are at the beginning of our Azure cloud migration. You will help shape our security architecture, guardrails, and processes from the outset. You will have the space to test new approaches, put them into practice, and develop them further together with us.

About us

Are you looking for a profitable scale-up that offers you long-term prospects and a disruptive business model with a growth-oriented corporate culture? Do you also want to grow beyond the usual standards, bring your own initiative and appreciate actively shaping topics?
Then yoummday is the right place for you!
yoummday: “You made my day” - As an innovative SaaS platform, we connect companies with highly qualified freelance call center agents (“Talents”) worldwide. Our digital solution enables flexible, scalable and efficient customer support - without the need for traditional call center structures. We are a family-run Munich-based scale-up with over 350 employees (“Daymakers”) at 5 locations in Europe and 1 in the USA - further growth is inevitable ;).
Become part of our team and set new standards in AI-supported customer service with us to create smart, data-driven solutions that inspire.
At yoummday, we value diversity and equal opportunities. We welcome applications regardless of gender, background, age, sexual orientation, religion, or disability. Different perspectives make us stronger – which is why we actively promote an inclusive work environment where everyone can reach their full potential.