Cloud Security Engineer

Nordnet Bank AB; Stockholms kommun; On-site; SEK 600,000 - 800,000; Full time

Benefits offered by this job

Access to training opportunities

Competitive salary

Opportunity to influence security design

Job summary

Nordnet Bank AB is looking for a Cloud Security Engineer to drive automation and integrate DevSecOps into their cloud-based platform. The ideal candidate will have an offensive security mindset and knowledge of Google Cloud Platform.

As a key player in this role, you will work within agile teams and collaborate with stakeholders to enforce security policies and improve security practices. The position offers opportunities for professional growth and a competitive salary.

Qualifications

• Curious and eager to learn and grow.
• Ability to balance security rigor with business agility.
• Experience as a Cloud Security Subject Matter Expert.

Responsibilities

• Develop and enforce security policies.
• Improve cloud security monitoring.
• Facilitate threat modeling and vulnerability assessments.
• Enable developers to automate security.

Skills

Offensive security mindset

Knowledge of Google Cloud Platform

Independent and teamwork skills

Strong stakeholder management skills

Defining security requirements

Experience with security best practices

Familiarity with programming (Java, Spring, React)

Tools

Google Security Command Centre (SCC)

Google Kubernetes Engine (GKE)

Infrastructure As Code (Terraform)

Github

Job description

Nordnet redefined the financial world as the first digital bank in Europe. Now we are about to do it again and the aim is to create the next generation of bank, in the cloud. We know that this requires great people, great teams, and great technology. Do you want to join us and build the new Nordnet? At Nordnet we want to democratize savings and investments by giving our customers access to the best tools and information whether you are a professional investor or a small saver. With modern technologies and speed of delivery, we are building the next generation investment platform.

This is part of the role

Nordnet is a company with tech as the primary focus. In our agile and autonomous teams, you will be working with engaged colleagues that love to share their knowledge. As a cloud security engineer, you will drive automation and integrate DevSecOps into our cloud‑based platform by embedding security in Continuous Integration/Continuous Delivery (CI/CD) pipelines, enhancing infrastructure security and ensuring secure software development practices.

As a Cloud Security Engineer acting autonomously and with a clear mandate, you will:

• Develop and enforce cloud and Infrastructure As Code (IaC) security policies.
• Improve cloud security monitoring by building and managing detections.
• Collaborate with engineering teams to ensure security best practices and Secure Software Development Life Cycle (SSDLC) (Shift-Left).
• Facilitate threat modelling sessions, secure code review and vulnerability assessments.
• Coordinate penetration testing efforts and track remediations.
• Enable developers to ship fast by automating security.
• Balance security rigor with business agility; we don't just secure, we enable.

This is you

To succeed in this role, we believe that you take great pride in your work, are curious and continuously want to learn and grow. Believing in collaboration and discussing ideas and concepts with your colleague, you will serve as the first point of contact for our Platform teams as a Cloud Security Subject Matter Expert to enable the delivery of great products.

As a Cloud Security Engineer, you have:

• Offensive security mindset ideally with former red teamer or penetration tester experience
• Knowledge of Google Cloud Platform (or equivalent experience with other Cloud providers)
  • Google Security Command Centre (SCC)
  • Google Kubernetes Engine (GKE)
  • Identity and Access Management (IAM)
  • Infrastructure As Code (Terraform)
  • Github
• Ability to work independently and as part of a team
• Strong stakeholder management skills, ability to work with both technical and non‑technical stakeholders
• Ability to define and implement security requirements in cloud environments
• Experience with security best practices and vulnerability management process.
• Familiarity with programming and major frameworks (Java, Spring, React)

What we offer

• Your expertise and contribution will be appreciated from day one
• Access to the latest AI tools with cutting edge models to support your daily work.
• Plenty of opportunities to grow as a security professional
• Competitive salary and compensation
• Opportunity to shape the architecture, influencing the security design of Europe's next‑generation digital bank from the ground up.
• Access to training opportunities such as professional certifications (e.g., GCP Security, OSCP, OSAI+, CISSP), industry conferences, and dedicated time for skills development.
• You won't just follow a checklist; you'll have the mandate to build and own your security automation roadmap.

We offer you the opportunity to work in a Nordic environment with a strong focus on delivery, product development and technology. Our ambitions are high and you will embark on a fast and challenging journey together with a skillful team of sharp and committed colleagues. Our teams are autonomous and embrace the agile way of working.

Culture is built and cared for, each day by everyone. We're proud of ours. Having a flat organization where anyone can talk to anyone creates a warm and friendly atmosphere worth protecting. We believe in a culture where every effort counts and where everyone is being recognized. A culture embracing our core values – passion, simplicity and transparency on all levels, no matter who you are or what you do.

We are over 900 employees located in Stockholm, Oslo, Helsinki, Copenhagen and Frankfurt.

We want to inform you that Nordnet conducts mandatory credit and background checks, as well as drug testing as a part of our recruitment process.