Security Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Establish and enforce the security baseline for cloud infrastructure, GPU servers, and services, which includes IAM, secrets management, and network controls.

• Conduct vulnerability scanning, coordinate external penetration tests, and ensure findings are tracked to resolution.

• Integrate security checks into GitLab CI/CD pipelines.

• Evaluate designs and code in collaboration with development and AI teams, focusing on risks associated with LLM applications.

• Lead technical responses to security incidents, managing the process from detection and containment through to post-mortem analysis and remediation.

• Implement and document technical controls for ISO 27001, BSI C5, and TISAX compliance.

• Respond to security inquiries from customers and partners.

• Act as a deputy for the Information Security Officer.

• Assist with internal audits.

• Facilitate training sessions for colleagues on information security practices.

• Collaborate closely with DevOps, development, AI, application teams, and the Information Security Officer.

• Report directly to the Chief Technology Officer.

⛳️ Requirements

• A minimum of 4 years of experience in security engineering, cloud security, or DevSecOps.

• Proven experience in securing production systems.

• Comprehensive knowledge of cloud and infrastructure security, which includes IAM, secrets management, network segmentation, and Linux hardening.

• Experience with AWS is preferred; familiarity with Open Telekom Cloud or other European cloud providers is advantageous.

• Proficiency in CI/CD security checks, dependency and container scanning, and vulnerability management.

• Ability to read Terraform and Python sufficiently to conduct reviews.

• Experience in managing security incidents from detection through to post-mortem analysis.

• Familiarity with working with penetration test outcomes.

• Experience in a certified environment.

• Practical knowledge of ISO/IEC 27001 controls.

• Experience with BSI C5, TISAX, or internal audits is a plus.

• A keen interest in LLM and AI security is advantageous.

• Fluency in both English and German.

• Must be based in Germany.

🏝️ Benefits

• 100% remote work is possible for individuals residing in Germany.

• Flexible working hours.

• 26 days of vacation, plus December 24th and 31st off.

• One additional vacation day for each year of employment, up to a total of 30 days.

• Discounts available, such as Urban Sports Club Membership, depending on location.

• Provision of a laptop (Lenovo or Mac).

• A budget for home office setup, reimbursed with the first salary.