Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Cyber Security Engineer — Infrastructure & AI Platform Security (f/m/d) role.
Rezi rewrites your resume against IONOS EN's job description. Free.
Tailor your resume to this Cyber Security Engineer — Infrastructure & AI Platform Security (f/m/d) role.
Rezi rewrites your resume against IONOS EN's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Cyber Security Engineer — Infrastructure & AI Platform Security (f/m/d) posting at IONOS EN — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Cyber Security Engineer — Infrastructure & AI Platform Security (f/m/d) posting at IONOS EN — free, in seconds.
About the Role
Own the security architecture for IONOS's provider-side infrastructure layer and serve as the subject matter expert for internal AI platforms and agents, ensuring they operate in a secure, governed, and auditable state. This is a hands-on expert role requiring you to set standards, pressure-test designs, and collaborate with platform and engineering teams for implementation.
Responsibilities
- Define and maintain security architecture standards and hardening baselines for provider-side infrastructure, including virtualization and container platforms, control planes, provisioning systems, DNS, mail infrastructure, and backup/recovery systems.
- Assess and strengthen tenant isolation across shared hosting, virtualization, and container layers, driving remediation with platform teams.
- Review infrastructure designs and major changes for security impact, acting as an escalation point for infrastructure security questions.
- Reduce blast radius on critical paths, including privileged access, administrative segmentation, secrets handling, and recovery integrity, by creating per-brand implementation plans.
- Support Cyber Defense, Vulnerability Management, and IT Emergency Management with infrastructure expertise during incidents and post-incident hardening.
- Own the security architecture and baseline standards for internal AI platforms, including model gateways, self-hosted models, agent frameworks, assistant integrations, connectors, and retrieval pipelines.
- Define and enforce how agents are identified, authenticated, and authorized, including non-human identity handling, credential management, least-privilege access, and human-in-the-loop requirements.
- Establish data access policies for internal AI systems and ensure agent activity is logged, attributable, and reviewable.
- Conduct pre-deployment security reviews for new internal AI platforms and agent use cases.
- Advise security functions and internal engineering teams on safe AI adoption, including defensible guardrails.
Requirements
- Several years of hands-on experience in infrastructure or platform security, preferably in a hosting provider, cloud provider, telco, or large-scale multi-tenant environment.
- Deep practical knowledge of Linux, virtualization and container platforms, networking, and multi-tenant infrastructure security.
- Strong background in identity and access management, including privileged access, machine/workload identity, secrets management, authorization models, and infrastructure-as-code security.
- Experience designing and enforcing security standards in heterogeneous, partly legacy landscapes, and gaining adoption from teams not directly managed.
- Working knowledge of LLM and agent system construction and operation, including risks like prompt injection, over-scoped tool access, data exposure, unlogged actions, and dependency issues.
- Ability to make and defend risk-based decisions, including blocking deployments with clear rationale.
- Ability to explain technical risk to non-technical stakeholders.
- Fluent English; German is a strong advantage.
Skills
- Infrastructure security
- Platform security
- AI platform security
- Agent security
- Security architecture
- Hardening baselines
- Tenant isolation
- Infrastructure design review
- Privileged access management
- Secrets management
- Identity and access management
- Machine identity
- Workload identity
- Infrastructure-as-code security
- LLM
- Agent systems
- Risk-based decision making
- Communication with non-technical stakeholders
Location
- Remote
- Hybrid
Work Type
- Hybrid working model
- Full-time
Experience Level
- Expert
Benefits
- Hybrid working model
- Flexible working hours
- Subsidized canteen (at some locations)
- Free drinks (at some locations)
- Modern office space with good transport connections
- Employee discounts
- Employee events
- Training and development opportunities
- Health offers
About the Company
- IONOS shapes the digital future for over 6.2 million customers worldwide with its solutions.
- Europe's leading hosting provider and a pioneer in independent cloud solutions.
- Building next-generation infrastructure, including sovereign cloud architectures, high-performance GPU clusters, and integrated AI automation tools.
- Committed to digital sovereignty for Europe and providing real impact for SMBs and large enterprises.
- Operates in agile teams with transparent structures, fostering team spirit for excellence and innovation.
Equal Opportunity
- We value diversity and welcome all applications – regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.