Security Engineer

Описание:

N26 has reimagined banking for today’s digital world by building a global digital banking platform. The company provides an elegant digital experience without physical branches, paperwork, and hidden fees.

Задачи:

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager;
• Own, define, and drive initiatives, solutions, processes, and frameworks to proactively identify and mitigate security threats within the AWS infrastructure;
• Design, deploy, and maintain cloud-native security solutions with end-to-end data protection, threat detection, automated controls, alerting, remediation, and continuous compliance;
• Research new attack vectors proactively;
• Conduct threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders;
• Monitor vulnerabilities, perform ongoing risk assessments, and collaborate with cross-functional teams to mitigate risks;
• Define penetration testing scopes and scenarios;
• Develop and maintain documentation with guidelines for strengthening security posture and ensuring secure cloud operations;
• Provide service to key stakeholders through the support portal;
• Participate voluntarily in the security incident response on-call rotation and lead security incidents.

Требования:

• Competent understanding and experience securing AWS cloud infrastructure, CI/CD pipelines, containerized environments, and Linux systems;
• Experience assessing security findings and mitigation strategies;
• Knowledge of STRIDE, MITRE ATT&CK®, OWASP, and other common security frameworks and tactics;
• Understanding of cloud data security challenges and best practices;
• Experience deploying and customizing security tools, including CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, and container runtime security;
• Proficiency with CI/CD pipelines such as Terraform for automated security testing and change management;
• Hands-on experience with virtual machines, containers, Kubernetes, serverless technologies, and infrastructure as code;
• Proficiency in Python, Bash, or Go for scripting and automation;
• Experience with ethical hacking and penetration testing methodologies;
• Familiarity with agile methodologies and project management;
• Ability to collaborate across teams and segments to achieve complex objectives;
• Hands‑on attitude and ability to drive solutions to completion;
• Excellent oral and written communication skills;
• Growth mindset focused on learning and advancing the team;
• Master’s degree in cybersecurity or a related field, or Bachelor’s degree in computer science or a related field with an advanced security certification;
• Nice to have: Contributions to the security community through open-source tools, research papers, conference talks, or similar activities.

Условия:

• Competitive personal development budget;
• Work from home budget;
• Discounts for fitness and wellness memberships;
• Language app and public transportation benefits;
• Premium subscription for the employee’s personal N26 bank account;
• Subscriptions for friends and family members;
• Additional day of annual leave for each year of service;
• High degree of autonomy and access to cutting-edge technologies;
• Relocation package with visa support.