Cloud Security Engineer – Cloud Foundations | SEB, Solna

SEB; Solna kommun; Hybrid; SEK 900,000 - 1,300,000; Full time

Benefits offered by this job

SEB staff banking

Office next to Mall of Scandinavia

Hybrid workplace

Job summary

SEB is seeking a hands-on Cloud Security Engineer to shape secure cloud platforms across GCP, AWS and Azure. You will build guardrails, landing zones and automated compliance while enabling developers to move quickly and safely.

In this role you will lead security decisions, engage with stakeholders, and partner with IT security and infrastructure teams. The position offers a hybrid work arrangement and opportunity to grow in a major financial group.

Qualifications

• Several years of cloud security work with GCP, AWS, or Azure, focus on GCP.
• Hands-on with IaC and CI/CD tooling such as Terraform and GitHub Actions.
• Scripting in PowerShell and Python for automation and tooling.
• Identity, access and network security in cloud environments.
• Log management, SIEM, detection and incident response practices.
• Observability tooling and native cloud monitoring capabilities.

Responsibilities

• Develop and maintain landing zones and capabilities across cloud platforms, primary in GCP.
• Lead security decisions and act as main IT security contact for stakeholders.
• Build preventive and detective controls and automated compliance checks.
• Create log pipelines and detections with the SOC for high throughput data.
• Review architecture and model threats before production rollout.
• Advise architects and developers to follow secure-by-default practices.
• Participate in incident response and cloud security investigations.

Skills

GCP security

IaC (Infrastructure as Code)

CI/CD

PowerShell

Python

IAM & network security

SIEM & log management

Observability tools

English fluency

Tools

Terraform

GitHub Actions

Job description

Join Cloud Foundations and help shape the secure cloud platforms that enable development across SEB.You will build guardrails, landingzonesand best practices that allow our developers to move quickly while meeting the bank’s security and compliance requirements.

In this hands-on and analytical role, you will write code, buildcontrolsand solve the security challenges that come with them, working closely with the teams that use the platform.Most of the hands-on work sits in GCP, while your analysis, decisions and advice reach across all three of our clouds: AWS,Azureand GCP.

What you will be doing

• Develop andmaintainour landing zones and underlying capabilities in SEB's public cloud platforms together with the team, with GCP as your primary platform and security,complianceand control as your focus.
• Take the lead on security questions,investigationsand decisions.
• Act as the main point of contact for IT security: towards the group security organization, ourstakeholdersand our sister departments within infrastructure.
• Build preventive and detective controls: policies,guardrailsand automated compliance checks used across the bank.
• Build log pipelines and detections together with our SOC, for large data volumes and high throughput.
• Review architecture, solve complex securityproblemsand threat model new platform services before they reach production.
• Advise architects and development teams on theplatform, andmake it easy for them to do the right thing.
• Take part in incidentresponseand investigations in our cloud environments.

Who you are

You are adriven,proactiveand collaborative engineer who takes ownership and enjoys solving complex problems. You continuously look for better ways of working, value knowledge sharing, and contribute to an open and transparent team environment where learning and improvement are part of everyday work.

Skills and experience

• Several years of cloud security work in GCP,AWSor Azure. Therole'scenterof gravity is GCP, so if your background ismainly inanother cloud, we expect you to want to grow into it.
• Hands-on with Infrastructure as Code,automationand CI/CD in tools such as TerraformandGitHub Actions.
• Scripting and development in PowerShell and Python.
• Identity and access management, network security,encryptionand key management in the cloud.
• Log management, SIEM,detectionor incident response.
• Observability tools such as Prometheus, Grafana or the cloud providers' native tooling.
• Fluent English, spoken and written.

Nice tohave

• Offensive security, penetrationtestingor security assessments.
• Experience inFinancial services or another regulated industry.
• Certifications in cloud or application security, such as SANS/GIAC or CCSP.

Whatweoffer

• A technical team of around twenty people where you have real influence over the platform.
• Hands-on work across three cloud platforms, not just one.
• A hybrid workplace with a balance between office and home.
• SEB staff banking and our wider benefits package.
• An office next door to Mall of Scandinavia in Solna.

Do you want to be part of SEB?

It is our fundamental belief that inclusion and diversityiscrucialforour future success. We strive to have an inclusive, value-driven culture where employees feel valued, respected, and involved irrespective of who they are, what they believe or where they come from.

Please be aware that our final candidates undergo background checks, a process thatincludesforexampleidentity control, verification of qualifications, credit checks, companyengagementsand history of crime. In some cases, we also apply random drug checks. During employment, employees within SEB can also expect to undergo recurring background checks.

SEB Sweden has a redeployment responsibility, which means that this position might be covered by internal redeployment.

Learn more about working at SEB on our Career website or through our Career podcasts.

sebgroup.com/career

bit.ly/SEBcareer