Senior Cloud Security Engineer

Stack

Responsibilities

• ▹Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead and Engineering Manager
• ▹Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within the AWS infrastructure
• ▹Design, deploy and maintain state-of-the-art cloud-native security solutions with end-to-end data protection, advanced threat detection, automated controls, alerting and remediation
• ▹Perform regular, proactive research to detect new attack vectors
• ▹Run threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders
• ▹Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate risk
• ▹Define the pentesting scope and scenarios
• ▹Develop and maintain documentation with clear guidelines for consistent, secure cloud operations
• ▹Provide first-class service to stakeholders in the support portal
• ▹Participate in the voluntary security incident response on-call rotation and lead security incidents

Requirements

• ▹Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environments and Linux systems
• ▹Experience assessing security findings and mitigation strategies
• ▹Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK and OWASP
• ▹Understanding of cloud data security challenges and best practices
• ▹Experience deploying and customising security tools (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)
• ▹Proficiency in using CI/CD pipelines (e.g. Terraform) for automated security testing and change management
• ▹Hands-on experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code
• ▹Proficiency in Python, Bash or Go for scripting and automation
• ▹Experience with ethical hacking and penetration testing methodologies
• ▹Master's degree in cybersecurity or related field, or a Bachelor's degree in computer science or related field with an advanced security certification

Nice to have

• ▹Contributions to the security community, such as open-source tools, research papers or conference talks

Soft skills

What we offer

• ▹Competitive personal development budget and work-from-home budget
• ▹Discounts on fitness and wellness memberships, language apps and public transportation
• ▹Premium subscription on your personal N26 bank account, plus subscriptions for friends and family
• ▹Additional day of annual leave for each year of service
• ▹High degree of autonomy and access to cutting-edge technologies in a diverse team
• ▹Relocation package with visa support for those who need it

About the company

N26 has reimagined banking for the digital world, eliminating physical branches, paperwork and hidden fees. It is headquartered in Berlin with offices in multiple European cities including Vienna and Barcelona, and has a team of around 1,500 people of more than 80 nationalities.