security engineer in digital banking

Stellenbeschreibung:

Описание:

N26 has reimagined banking for today’s digital world by building a global digital banking platform. The company provides an elegant digital experience without physical branches, paperwork, and hidden fees.

Задачи:

Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager;
Own, define, and drive initiatives, solutions, processes, and frameworks to proactively identify and mitigate security threats within the AWS infrastructure;
Design, deploy, and maintain cloud-native security solutions with end-to-end data protection, threat detection, automated controls, alerting, remediation, and continuous compliance;
Research new attack vectors proactively;
Conduct threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders;
Monitor vulnerabilities, perform ongoing risk assessments, and collaborate with cross-functional teams to mitigate risks;
Define penetration testing scopes and scenarios;
Develop and maintain documentation with guidelines for strengthening security posture and ensuring secure cloud operations;
Provide service to key stakeholders through the support portal;
Participate voluntarily in the security incident response on-call rotation and lead security incidents.

Требования:

Competent understanding and experience securing AWS cloud infrastructure, CI/CD pipelines, containerized environments, and Linux systems;
Experience assessing security findings and mitigation strategies;
Knowledge of STRIDE, MITRE ATT&CK®, OWASP, and other common security frameworks and tactics;
Understanding of cloud data security challenges and best practices;
Experience deploying and customizing security tools, including CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, and container runtime security;
Proficiency with CI/CD pipelines such as Terraform for automated security testing and change management;
Hands-on experience with virtual machines, containers, Kubernetes, serverless technologies, and infrastructure as code;
Proficiency in Python, Bash, or Go for scripting and automation;
Experience with ethical hacking and penetration testing methodologies;
Familiarity with agile methodologies and project management;
Ability to collaborate across teams and segments to achieve complex objectives;
Hands‑on attitude and ability to drive solutions to completion;
Excellent oral and written communication skills;
Growth mindset focused on learning and advancing the team;
Master’s degree in cybersecurity or a related field, or Bachelor’s degree in computer science or a related field with an advanced security certification;
Nice to have: Contributions to the security community through open-source tools, research papers, conference talks, or similar activities.