Senior Cloud Security Architect — Hybrid Role with Impact

Quinyx AB; Stockholms kommun; Hybrid; SEK 1.200.000 - 1.600.000; Vollzeit

Benefits dieser Stelle

Flexible hours

Hybrid setup

Health insurance

Pension plan

Gym membership contribution

Zusammenfassung

Quinyx AB is seeking a senior Security Architect to own security day to day across our product, cloud platform and ISMS. You will set security requirements, review what Engineering builds, run ISO 27001 and SOC 2 programs, and close findings.

You report to the CIO and collaborate with Engineering, Platform, SRE, IT and Legal. This hands-on role bridges cloud security engineering and continuous assurance, working in cloud environments, containerized workloads, CI/CD, and identity architecture,

Qualifikationen

• Several years of hands-on security work in a multi-tenant SaaS company, covering cloud security engineering and GRC.
• Hands-on experience with AWS or GCP and working knowledge of the other: IAM, networking, workload security, KMS and audit logging.
• Securing CI/CD pipelines, infrastructure as code (Terraform or CloudFormation) and containers, with practical use of SAST, DAST, SCA and secret scanning tools.
• Web and API security: OWASP ASVS and Top 10, and authentication and authorisation protocols (OAuth 2.0, SAML, OIDC).
• AI and LLM security: the OWASP Top 10 for LLM Applications and the OWASP AI Exchange, and practical experience with the risks of LLM integrations, agents and connectors (prompt injection, data leakage, excessive agency, supply chain).
• Detection engineering: writing and tuning SIEM detections with MITRE ATT&CK as the reference.
• Operating ISO 27001 and SOC 2 Type II controls: evidence collection, auditor coordination and a formal risk register.
• Reads code and Terraform, writes automation in Python, Bash or PowerShell, and analyses telemetry with SIEM queries or SQL.
• Has led incidents and written the post-incident review.
• Turns a security finding into an action an engineer will take, and a risk into a sentence a leadership team will act on.

Aufgaben

• Cloud and architecture security: run security architecture reviews and threat modelling for product and infra changes.
• SDLC and application security: embed security into CI/CD with IaC scanning, SAST, DAST, SCA and secret scanning.
• AI security: threat-model and review AI features and LLM integrations against OWASP Top 10 for LLM apps.
• Vulnerability management: own end-to-end process across apps, cloud, endpoints; track pentest findings to closure.
• Detection and incident response: define telemetry, tune SIEM detections, lead incident triage.
• ISMS and audits: run ISO 27001 and SOC 2 day-to-day; coordinate audits and evidence collection.
• Vendor and customer assurance: assess third-party risk and answer customer security questionnaires with reusable evidence.

Kenntnisse

Cloud security engineering

GRC

Threat modelling

IAM

CI/CD security

Terraform/CI

Python/Bash/PowerShell

Incident response

ISO 27001 & SOC 2

SIEM & telemetry

Tools

Terraform

CloudFormation

SAST

DAST

SCA

IAM/Audit logging tools

Jobbeschreibung

Quinyx AB is seeking a senior Security Architect to own security day to day across our product, cloud platform and ISMS. You will set security requirements, review what Engineering builds, run ISO 27001 and SOC 2 programs, and close findings.

You report to the CIO and collaborate with Engineering, Platform, SRE, IT and Legal. This hands-on role bridges cloud security engineering and continuous assurance, working in cloud environments, containerized workloads, CI/CD, and identity architecture,