security engineer in digital banking

Описание:

N26 has reimagined banking for today’s digital world by building a global digital banking platform. The company provides an elegant digital experience without physical branches, paperwork, and hidden fees.

Задачи:

• Drive the Cloud Infrastructure Security function roadmap in alignment with the Product Manager, Tech Lead, and Engineering Manager;

• Own, define, and drive initiatives, solutions, processes, and frameworks to proactively identify and mitigate security threats within the AWS infrastructure;

• Design, deploy, and maintain cloud-native security solutions with end-to-end data protection, threat detection, automated controls, alerting, remediation, and continuous compliance;

• Research new attack vectors proactively;

• Conduct threat modeling sessions, assess and classify security threats, and define mitigation solutions with stakeholders;

• Monitor vulnerabilities, perform ongoing risk assessments, and collaborate with cross-functional teams to mitigate risks;

• Define penetration testing scopes and scenarios;

• Develop and maintain documentation with guidelines for strengthening security posture and ensuring secure cloud operations;

• Provide service to key stakeholders through the support portal;

• Participate voluntarily in the security incident response on-call rotation and lead security incidents.

Требования:

• Competent understanding and experience securing AWS cloud infrastructure, CI/CD pipelines, containerized environments, and Linux systems;

• Experience assessing security findings and mitigation strategies;

• Knowledge of STRIDE, MITRE ATT&CK®, OWASP, and other common security frameworks and tactics;

• Understanding of cloud data security challenges and best practices;

• Experience deploying and customizing security tools, including CSPM/CNAPP, vulnerability scanners, IDS/IPS, endpoint security, KSPM, and container runtime security;

• Proficiency with CI/CD pipelines such as Terraform for automated security testing and change management;

• Hands-on experience with virtual machines, containers, Kubernetes, serverless technologies, and infrastructure as code;

• Proficiency in Python, Bash, or Go for scripting and automation;

• Experience with ethical hacking and penetration testing methodologies;

• Familiarity with agile methodologies and project management;

• Ability to collaborate across teams and segments to achieve complex objectives;

• Hands‑on attitude and ability to drive solutions to completion;

• Excellent oral and written communication skills;

• Growth mindset focused on learning and advancing the team;

• Master’s degree in cybersecurity or a related field, or Bachelor’s degree in computer science or a related field with an advanced security certification;

• Nice to have: Contributions to the security community through open-source tools, research papers, conference talks, or similar activities.

Условия:

• Competitive personal development budget;

• Work from home budget;

• Discounts for fitness and wellness memberships;

• Language app and public transportation benefits;

• Premium subscription for the employee’s personal N26 bank account;

• Subscriptions for friends and family members;

• Additional day of annual leave for each year of service;

• High degree of autonomy and access to cutting-edge technologies;

• Relocation package with visa support.