Principal Security Engineer

Jobgether; Germany (OH); On-site; USD 138,000 - 196,000; Full time

Benefits offered by this job

Direct ownership of security controls

Autonomy in a technical security team

Exposure to low-latency trading infra

Job summary

Jobgether, listed on behalf of a partner company, seeks a Principal Security Engineer based in Germany to own hands-on security across a global trading environment. You will design, deploy and operate security controls spanning cloud, on-premises and production systems, with a focus on IAM, key protection, CI/CD security and automation.

You will work with Infrastructure and Engineering teams to embed safeguards into systems and development pipelines, ensuring low latency, resilience and risk

Qualifications

• Deep expertise in IAM across cloud environments with practical implementation experience.
• Strong knowledge of cloud security controls (AWS/Azure, multi-cloud).
• Experience securing CI/CD pipelines (GitLab preferred).
• Proficient Linux scripting and automation (Python/Bash).

Responsibilities

• Implement and improve security controls across multi-cloud and on-premises systems.
• Design IAM models for identities, permissions and privileged access.
• Harden CI/CD pipelines and embed security throughout the SDLC.
• Operate key management, secrets handling and cryptographic keys.
• Respond to incidents and drive remediation to completion.
• Collaborate with Infrastructure and Engineering teams to embed security into workflows.

Skills

IAM design

Cloud security

CI/CD security

Linux scripting

Infrastructure as code

Incident response

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Security Engineer based in Germany.

As a Principal Security Engineer, you will take hands-on ownership of security implementation across a global, always-on digital asset trading environment. You will design, deploy and operate security controls across cloud, on-premises infrastructure and critical production systems. The role combines cloud security, identity and access management, key protection, CI/CD security, incident response and security automation. You will work closely with Infrastructure and Engineering teams to embed effective security controls directly into systems and development workflows. With a strong focus on practical execution, you will write code, configure systems and solve complex security challenges rather than focus on policy or people management. The environment is technically demanding and fast-moving, with resilience, low latency and risk discipline at its core. You will have significant autonomy and the opportunity to make an immediate impact on the security of critical trading infrastructure.

Accountabilities

• Implement, operate and continuously improve security controls across multi-cloud environments, primarily AWS and Azure, with exposure to GCP and AliCloud, as well as on-premises infrastructure.
• Own the implementation of identity and access management strategies, designing secure, scalable and practical models for identities, permissions and privileged access.
• Design and operate key management and custody security controls, including HSMs, secrets management and secure handling of sensitive cryptographic keys used in trading operations.
• Harden GitLab CI/CD pipelines and integrate security controls throughout the software development and delivery lifecycle.
• Configure and maintain corporate security technologies, including endpoint protection, mobile device management, Jamf, DLP and identity management platforms.
• Respond to security incidents by triaging alerts, investigating threats, containing incidents and driving remediation through to completion.
• Conduct security assessments across infrastructure and applications to identify vulnerabilities, weaknesses and opportunities for improvement.
• Automate security operations, including detection, alerting, monitoring and response processes.
• Partner closely with Infrastructure teams to embed security into cloud provisioning, infrastructure configuration and operational workflows.
• Identify opportunities to improve security resilience while minimizing unnecessary friction for engineers and other technical stakeholders.
• Own security problems end-to-end, from identifying risks and designing solutions through implementation, testing and ongoing operation.

Requirements

• 8+ years of hands-on experience in security engineering, security operations or a closely related technical security discipline.
• Deep expertise in identity and access management, including practical experience designing and implementing IAM across cloud environments.
• Strong, well-developed opinions on IAM architecture, access models, permissions and identity security, backed by hands-on implementation experience.
• Strong working knowledge of cloud security controls across multiple providers, particularly AWS and Azure.
• Experience securing CI/CD platforms and software delivery pipelines, with GitLab experience preferred.
• Familiarity with corporate IT security technologies such as Jamf, endpoint protection, DLP, SSO and identity providers.
• Strong Linux skills and confidence with scripting and automation using Python, Bash or similar languages.
• Experience with infrastructure-as-code technologies such as Terraform or Pulumi is an advantage.
• Ability to investigate security incidents, assess infrastructure and application risks, and implement practical remediation.
• Experience operating effectively in fast-paced, technically complex environments where security, resilience and availability are critical.
• Strong problem-solving and ownership mindset, with the ability to independently drive technical initiatives from identification through implementation.
• Clear communication skills and the ability to collaborate effectively with Infrastructure and Engineering teams.
• Experience in financial services, digital assets, cryptocurrency or other regulated environments is beneficial but not required.
• Demonstrated technical capability and practical experience are valued more highly than security certifications.

Benefits

• Direct ownership of security implementation across critical infrastructure.
• High-impact role within a small, highly technical security team.
• Significant autonomy and responsibility over security engineering initiatives.
• Opportunity to work closely with Infrastructure and Engineering teams and influence security architecture in practice.
• Exposure to low-latency trading infrastructure and complex digital asset technology.
• Opportunity to work on challenging security problems across multi-cloud and on-premises environments.
• Hands-on technical role focused on building, automating and operating security controls rather than policy administration or people management.
• Opportunity to make immediate, measurable contributions to security resilience and risk management.
• Fast-paced technical environment with direct exposure to senior leadership and business-critical security decisions.