Security Engineer *EU/UK remote* (m/f/d)

Responsibilities

• Integrate security best practices throughout the SDLC to protect products, infrastructure, and customer data.
• Design, implement, and maintain security automation tooling to address problems at scale (e.g., patch management, vulnerability management, compliance evidence collection).
• Embed security controls and guardrails into the developer platform to enable secure and efficient delivery.
• Define and promote “Paved Roads” - reusable, secure development standards and Terraform/Docker modules.
• Harden containerized workloads (ECS and EKS) - ensure clusters follow security best practices for isolation, networking, and access control
• Maintain secure, up-to-date base images; enforce image signing and provenance; implement admission control, least-privilege IAM roles, and runtime anomaly detection.
• Deploy and manage cloud security platforms (e.g., Wiz) and drive remediation workflows.
• Automate collection of audit-ready evidence for frameworks like PCI DSS, ISO 27001, SOC 2, and DORA.
• Support vulnerability management (triage, SLAs, RCA) and lead incident response and post-mortems.
• Conduct threat modeling, architecture reviews, and provide guidance on secure design and cryptography.

Languages