About the Role
We are seeking a Senior Cloud Security Engineer to lead the identification and mitigation of security threats and safeguard sensitive data within our AWS infrastructure. This role involves collaborating with Platform and Data teams to enhance our security posture and maturity.
Responsibilities
- Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.
- Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure.
- Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms.
- Perform regular and proactive research to detect new attack vectors.
- Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions.
- Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.
- Define the pentesting scope and scenarios.
- Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations.
- Provide a first class service to our main stakeholders in our support portal.
- Be part of our security incident response on-call rotation (voluntary) and lead security incidents.
Requirements
- Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.
- Experience with assessing security findings and mitigation strategies.
- Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP.
- Understanding of cloud data security challenges and best practices across cloud environments.
- Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.).
- Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security testing and change management.
- Hands-on Experience with modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
- Proficiency in Python, Bash, or GO for scripting and automation.
- Experience with ethical hacking and penetration test methodologies.
- Familiarity with agile methodologies and project management.
- Demonstrated ability to collaborate across teams and segments to achieve complex objectives.
- A hands-on attitude with a knack for driving solutions to completion.
- Excellent oral and written communication skills.
- A growth mindset focused on learning and pushing the team forward.
- Contributions to the security community, such as open-source tools, research papers, conference talks, etc.
Skills
- AWS
- CI/CD pipelines
- Containerized environment
- Linux systems
- Risk Assessment
- STRIDE
- MITRE ATT&CK®
- OWASP
- Data Security
- CSPM/CNAPP
- Vulnerability scanners
- IDS/IPS
- Endpoint security
- KSPM
- Container runtime security
- Terraform
- Virtual machines
- Containers
- Kubernetes
- Serverless
- Infrastructure as code
- Python
- Bash
- GO
- Ethical hacking
- Penetration testing
- Agile methodologies
- Project management
- Collaboration
- Communication
Location
- Berlin
Work Type
- Full-time
Experience Level
- Senior
Education Level
- Master's degree in cybersecurity or a related field
- Bachelor's degree in computer science or a related field with an advanced security certification
Benefits
- Competitive personal development budget
- Work from home budget
- Discounts to fitness & wellness memberships
- Discounts to language apps
- Discounts to public transportation
- Premium subscription on personal N26 bank account
- Subscriptions for friends and family members
- Additional day of annual leave for each year of service
- High degree of autonomy
- Access to cutting edge technologies
- Relocation package
- Visa support
About the Company
- N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.
- We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings.
- Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do.
- We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities.
Equal Opportunity
- We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.
- We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages.
- We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination.
- If there's anything you need to make the application process work for you, please let us know by reaching out to candidate.exp@n26.com.
- Visit our website to learn more about Diversity, Equity, & Inclusion at N26.
