Cloud Security Engineer

Nordnet AB; Stockholms kommun; On-site; SEK 600,000 - 800,000; Full time

Benefits offered by this job

Access to the latest AI tools

Opportunities for professional growth

Training opportunities for certifications

Job summary

Nordnet AB is seeking a Cloud Security Engineer to enhance cloud security policies and practices within their innovative platform. You will collaborate with teams to ensure security best practices and guide the development process effectively, serving as an expert in cloud security.

Ideal candidates will demonstrate an offensive security mindset, familiarity with Google Cloud tools, strong stakeholder management skills, and the ability to define security requirements. This position offers competitive compensation and opportunities for professional development.

Qualifications

• Experience with security best practices and vulnerability management process.
• Ability to define and implement security requirements in cloud environments.
• Experience in automation of security processes.

Responsibilities

• Develop and enforce cloud and IaC security policies.
• Improve cloud security monitoring by building and managing detections.
• Coordinate penetration testing efforts and track remediations.

Skills

Offensive security mindset

Knowledge of Google Cloud Platform

Strong stakeholder management skills

Ability to work independently and as part of a team

Familiarity with programming and major frameworks (Java, Spring, React)

Tools

Google Security Command Centre

Google Kubernetes Engine

Identity and Access Management (IAM)

Infrastructure As Code (Terraform)

Github

Job description

Nordnet redefined the financial world as the first digital bank in Europe. Now we are about to do it again and the aim is to create the next generation of bank, in the cloud. We know that this requires great people, great teams, and great technology. Do you want to join us and build the new Nordnet?

At Nordnet we want to democratize savings and investments by giving our customers access to the best tools and information whether you are a professional investor or a small saver. With modern technologies and speed of delivery, we are building the next generation investment platform.

As a Cloud Security Engineer acting autonomously and with a clear mandate, you will:

• Develop and enforce cloud and Infrastructure As Code (IaC) security policies.
• Improve cloud security monitoring by building and managing detections.
• Collaborate with engineering teams to ensure security best practices and Secure Software Development Life Cycle SSDLC (Shift-Left).
• Facilitate threat modelling sessions, secure code review and vulnerability assessments.
• Coordinate penetration testing efforts and track remediations.
• Enable developers to ship fast by automating security.
• Balance security rigor with business agility; we don't just secure, we enable.

This is you

To succeed in this role, we believe that you take great pride in your work, are curious and continuously want to learn and grow. Believing in collaboration and discussing ideas and concepts with your colleague, you will serve as the first point of contact for our Platform teams as a Cloud Security Subject Matter Expert to enable the delivery of great products.

As a Cloud Security Engineer, you have:

• Offensive security mindset ideally with former red teamer or penetration tester experience
• Knowledge of Google Cloud Platform (or equivalent experience with other Cloud providers)
  • Google Security Command Centre (SCC)
  • Google Kubernetes Engine (GKE)
  • Identity and Access Management (IAM)
  • Infrastructure As Code (Terraform)
  • Github
• Ability to work independently and as part of a team
• Strong stakeholder management skills, ability to work with both technical and non-technical stakeholders
• Ability to define and implement security requirements in cloud environments
• Experience with security best practices and vulnerability management process.
• Familiarity with programming and major frameworks (Java, Spring, React)

What we offer

• Your expertise and contribution will be appreciated from day one
• Access to the latest AI tools with cutting edge models to support your daily work.
• Plenty of opportunities to grow as a security professional
• Competitive salary and compensation
• Opportunity to shape the architecture, influencing the security design of Europe’s next-generation digital bank from the ground up.
• Access to training opportunities such as professional certifications (e.g., GCP Security, OSCP, OSAI+, CISSP), industry conferences, and dedicated time for skills development.
• You won't just follow a checklist; you’ll have the mandate to build and own your security automation roadmap.

We are over 900 employees located in Stockholm, Oslo, Helsinki, Copenhagen and Frankfurt.