Cloud Security Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Take charge of hands-on security engineering and establish the security function as the company expands.

• Evaluate source code and architecture for APIs, backend services, and internal tools.

• Perform targeted penetration tests and collaborate with engineers to address root causes and implement practical solutions.

• Oversee vulnerabilities and coordinate external penetration testing efforts.

• Manage alerting, intrusion detection, incident processes, and the on-call protocol.

• Strengthen cloud and platform security, encompassing access control, network boundaries, secrets, containers, deployment pipelines, CI/CD, repositories, and dependencies.

• Protect APIs through measures such as authentication, authorization, tenant isolation, token management and lifecycle, abuse prevention, enterprise SSO, and audit trails.

• Safeguard AI systems against prompt injection and risks related to tools, agents, MCP, data retrieval, ingestion, and residency.

• Oversee identity and company security, which includes employee SSO, MFA, privileged access, onboarding/offboarding, access reviews, MDM, endpoint security, and SaaS access.

• Execute threat modeling and secure design evaluations across engineering teams.

• Establish security priorities and a roadmap based on actual risk assessments.

• Determine which security capabilities to develop, purchase, automate, or postpone.

• Expand the security team and participate in recruitment efforts.

• Act as the security representative for enterprise clients.

• Lead the SOC 2 program using Drata.

⛳️ Requirements

• Over 5 years of hands-on security experience across multiple disciplines.

• In-depth knowledge of application security, including web/API attack methodologies, code review, and targeted penetration testing.

• Strong understanding of authentication and authorization mechanisms, such as OAuth, OIDC, sessions, token management, and access control.

• Fundamental knowledge of cloud security, covering identity, network, workload, and pipeline security.

• Defensive experience in investigating actual incidents and enhancing detection and alerting systems.

• Proficient in threat modeling and secure architecture for cloud, container, and API systems.

• Engineering background with the capability to navigate through codebases and create security solutions.

• Prior experience with Go is advantageous, but not mandatory.

• Background in resource-limited environments such as startups, small security teams, or consultancies.

• Willingness to build and eventually lead a security team; previous leadership experience is beneficial but not essential.

• Proficient in Claude Code, with specific examples of usage required.

• Sound judgment concerning the pace of security in a company that delivers products daily.

• Familiarity with SOC 2, ISO 27001, or rigorous enterprise security assessments.

• Excellent verbal and written communication skills in English.

• Must be located in European or African time zones (±3 hours from CET).

• Full-time availability, 40 hours per week.

• Nice-to-have: Experience in AI and LLM security, as an early security hire, in security engineering leadership or mentoring, Go, security tooling or automation, MDM, endpoint protection, identity provider administration, compliance automation tools, security certifications, GDPR, travel or GDS exposure, and German language skills.

🏝️ Benefits

• Full-time employment (40 hours per week).