Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Responsibilities:
- Set and enforce the security baseline for cloud infrastructure, GPU servers and services, including IAM, secrets and network controls
- Run vulnerability scanning, coordinate external penetration tests and track findings to closure
- Add security checks to GitLab CI/CD pipelines
- Review designs and code with development and AI teams, including risks specific to LLM applications
- Lead technical responses to security incidents from detection and containment through post-mortem and remediation
- Implement and evidence technical controls for ISO 27001, BSI C5 and TISAX
- Answer security questions from customers and partners
- Deputise for the Information Security Officer
- Support internal audits
- Help train colleagues on information security
- Work closely with DevOps, development, AI and application teams and the Information Security Officer
- Report to the Chief Technology Officer
Requirements:
- 4+ years of experience in security engineering, cloud security or DevSecOps
- Experience securing production systems
- In-depth knowledge of cloud and infrastructure security, including IAM, secrets management, network segmentation and Linux hardening
- Experience with AWS preferred; experience with Open Telekom Cloud or other European clouds is a plus
- Experience with CI/CD security checks, dependency and container scanning, and vulnerability management
- Ability to read Terraform and Python well enough to review them
- Experience handling security incidents from detection to post-mortem
- Experience working with penetration test findings
- Experience working in a certified environment
- Practical knowledge of ISO/IEC 27001 controls
- Experience with BSI C5, TISAX or internal audits is a plus
- Interest in LLM and AI security is a plus
- Fluent English and German
- Based in Germany
Benefits:
- 100% remote work possible given a German residence
- Flexible working hours
- 26 days vacation plus December 24th and 31st off
- 1 additional vacation day per year of employment, up to 30 days
- Discounts, e.g., Urban Sports Club Membership, depending on location
- Laptop (Lenovo or Mac)
- Home office setup budget, paid with the first salary
Similar Jobs
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.