About this role
About the opportunity
Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our Platform and Data teams and be at the forefront of safeguarding our customer and our organisation.
At N26, our Infrastructure Security team is on a mission to detect and remediate IT and cloud infrastructure security threats. We're dedicated to providing efficient and effective services that empower our N26 tech teams to thrive.
Once here you will
• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager.
• Own, define and drive initiatives, solutions, processes and frameworks to proactively identify and mitigate security threats within our AWS infrastructure which leads to an overall improvement of our security maturity.
• Design, deploy and maintain state-of-the-art cloud-native security solutions, incorporating end-to-end data protection, advanced threat detection, automated controls, alerting and remediation mechanisms to ensure continuous compliance and protection across our cloud infrastructure.
• Perform regular and proactive research to detect new attack vectors.
• Perform Threat Modeling Sessions, assess and classify identify security threats and define threats mitigation solutions in alignment with the stakeholders
• Monitor for vulnerabilities, perform ongoing risk assessment and collaborate with cross-functional teams to mitigate the risk.
• Define the pentesting scope and scenarios.
• Develop and maintain documentation providing clear guidelines to strengthen security posture and ensure consistent, secure cloud operations across the organisation.
• Provide a first class service to our main stakeholders in our support portal
• Be part of our security incident response on-call rotation (voluntary) and lead security incidents
What you will bring along
• Cloud Security : Competent understanding and experience of securing at minimum AWS cloud infrastructure environments, CI/CD pipelines, containerized environment and Linux systems.
• Risk Assessment: Experience with assessing security findings and mitigation strategies
• Security Savvy : Competent knowledge of common security frameworks and tactics, including STRIDE, MITRE ATT&CK®, and OWASP.
• Data Security: Understanding of cloud data security challenges and best practices across cloud cloud environments.
• Tool Mastery: Experience in deploying and customising security tools to address threats and reduce risk (CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, container runtime security, etc.)
• Automation Pro : Proficiency in using CI/CD pipelines (e.g., Terraform) for implementing automated security tes