Platform Security Engineer (f/m/x) (Germany)

Who We're Looking For

Are you a security enthusiast with a passion for safeguarding platforms and ensuring robust security measures? Do you thrive in dynamic environments and enjoy hunting for potential threats and vulnerabilities? If so, you might be the perfect fit for our Platform Security Engineer position!

As our Platform Security Engineer, you will be the key player in fortifying our platform's security. Your mission will involve penetration testing, threat hunting, and continuously improving our security architecture. You will work closely with various teams to implement best practices and security controls, ensuring our platform remains secure and resilient.

What You'll Do

• Penetration Testing: Conduct penetration testing of platforms and new releases to identify and mitigate vulnerabilities.
• Audit and Improvement: Audit and continually improve security controls such as WAF, DDoS, and botnet protection.
• Threat Hunting: Discover security issues through proactive threat hunting and implement controls to fill any gaps.
• Security Reviews: Perform security architecture and source code security reviews to ensure robust security practices.
• Cloud Security: Continuously improve cloud security architecture and automate best policies on credentials management (AWS keys, database passwords, access control).
• Policy Definition: Refine cloud security policies and processes, acting as a key contributor to security processes and policies across the organization.
• Advocacy: Act as an advocate for adopting best practices in the development of platforms, promoting a security-first mindset.
• Secure Coding (SSDLC): Ensure secure coding practices are followed across all development projects, supporting and training engineering teams.
• Bot Protection and Defense: Implement and manage bot protection and attack defense mechanisms. Monitor traffic for suspicious activities and respond to security incidents.

Who You Are

• Security Expert: You have at least 4 years of experience with security in AWS and container environments.
• Technically Proficient: Familiarity with tools and platforms like Cloudflare, AWS, Burpsuite, Kubernetes, Docker, Sonarqube, and Gitlab.
• Incident Responder: You have experience in security incident response and can handle security breaches effectively.
• Developer Mindset: You possess development/scripting skills in Golang, Python, or Bash.
• CI/CD Knowledge: Understanding of CI/CD pipelines, OAuth, SAML, and bot management is a plus.
• Team Player: You thrive in a team-oriented environment and support your colleagues.
• Adaptable and Organized: You have a strong work ethic, self-motivation, and good organization skills, thriving in a fast-paced, dynamic environment.
• Certifications: OSCP/OSCE

Qualifications

• At least 4 years of experience with security in AWS and containers.
• Knowledge of CI/CD pipelines, OAuth, SAML, and bot management is a plus.
• Experience with Cloudflare, AWS, Burpsuite, Kubernetes, Docker, Sonarqube, and Gitlab.
• Good security knowledge of AWS.
• Experience in security incident response.
• Development/scripting skills in Golang, Python, or Bash.