Senior Cloud Security Engineer at N26
Berlin
on-site · full-time · Visa sponsorship
Responsibilities:
- Own and drive the Cloud Infrastructure Security roadmap in partnership with Product, Tech Lead and Engineering Manager.
- Define and implement initiatives, processes and frameworks to detect and mitigate threats across AWS infrastructure.
- Design, deploy and maintain cloud-native security controls: data protection, alerting, detection and automated remediation.
- Run threat modeling sessions, classify risks and produce mitigation plans with stakeholders.
- Monitor vulnerabilities, perform ongoing risk assessments and coordinate cross-functional remediation.
- Define pentest scopes and scenarios; maintain security documentation and run stakeholder support through the portal.
- Participate (voluntary) in incident response on-call and lead incident handling when required.
Requirements:
- Proven experience securing AWS environments, CI/CD pipelines, containerised workloads and Linux systems.
- Practical knowledge of threat frameworks (STRIDE, MITRE ATT&CK, OWASP) and risk assessment methodologies.
- Hands-on with security tooling (CSPM/CNAPP, vulnerability scanners, IDS/IPS, KSPM, container runtime security, endpoint security).
- Strong automation skills using IaC and pipelines (Terraform, CI/CD) and scripting (Python, Bash, Go).
- Experience defining pentest scope and participating in ethical hacking/pen testing.
- Excellent communication and collaboration skills to work across engineering and product teams.