(Senior) Security Engineer for DevOps and Cloud Platforms (m / f / d)

Your new team :

Join our IT Operations Team and become a driving force for security at auxmoney. Together with our Information Security Officer, you’ll ensure security is integrated into all aspects of our work, from software development to platform operations. You will collaborate across departments, shape secure infrastructures, and safeguard our systems and data while enabling teams to work confidently and efficiently.

What you can expect :

• Embed Security in CI / CD : Automate security testing in GitLab (SAST, DAST, dependency scans) to identify vulnerabilities early and support rapid development.
• Automate and scale security controls : Implement tools for code analysis, secret management, container security, and IaC scanning to ensure consistent and reliable security checks.
• Collaborate across teams : Work closely with developers, platform engineers, and IT operations to promote secure coding, configuration, and deployment practices, advocating for "security as code".
• Monitor and respond effectively : Set up monitoring and alerting for AWS and Azure, investigate incidents, and work with teams to address root causes.
• Drive compliance and best practices : Help enforce security standards and regulatory requirements (GDPR, DORA, ISO 27001), maintaining lean documentation and supporting audits pragmatically.
• Enable data-driven decisions : Develop reporting to translate technical findings into clear insights and recommendations for stakeholders.

Your profile

• Cloud expertise : Experience with cloud environments (preferably AWS or Azure) and understanding of cloud security best practices.
• CI / CD knowledge : Familiarity with GitLab pipelines and automating security testing.
• Tool experience : Experience with security tools such as Microsoft Entra, Defender, Rapid7, or similar.
• Tech skills : Knowledge of containerization (Docker, Kubernetes) and infrastructure-as-code (Terraform, CloudFormation).
• Team spirit : Collaborative, solution-oriented mindset eager to learn.
• Language skills : Proficiency in English and/or German.
• Compliance know-how : Experience with frameworks like GDPR, DORA, or ISO 27001 is a plus.
• Incident management experience : Familiarity with tools like incident.io and Atlassian Suite (Jira, Confluence).
• Monitoring and scripting : Knowledge of monitoring tools and scripting skills (Python, Bash) beneficial.

What we offer :

• Flexibility for Your Lifestyle : Family-friendly hours and home office options.
• Ergonomic Work Environment : Comfortable workstations for office days.
• Independent Work : Autonomy and space for your ideas.
• Grow with Us : Opportunities for growth and development, including an annual budget.
• Team Spirit : Regular events and social activities.
• Mobility Your Way : Support for commuting preferences.
• Stay Active : Discounted memberships and in-house fitness facilities.
• Secure Your Future : Company pension plan subsidies.
• Tailored Benefits : Customized benefits to suit your personal situation.

Your Perspective : You will shape the security of our tech stack, grow in DevSecOps, and collaborate with passionate engineers. This role offers a tangible impact on building secure, reliable, and scalable software at auxmoney.

We value diversity and equal opportunities. Applications from all backgrounds, including parents, persons with disabilities, and LGBTQIA+ community members, are welcome. Please inform us of any accommodations or preferences during the application process.

About us

We are auxmoney, one of Germany’s leading Fintech companies and the largest credit marketplace in Continental Europe. We operate from Düsseldorf, Budapest, Dublin, and Málaga, combining startup agility with the stability of a mature company. We foster innovation, diversity, and responsibility, and everyone’s contribution is valued. Visit our social media channels for more insights.

#J-18808-Ljbffr