Security Engineer
New
C
CAST AICloud infrastructure
Location: European UnionFull-TimeMiddle
SalaryEquity options.
Apply NowOpens the employer's application page
Job Details
- Languages
- Strong written and spoken English.
- Experience
- At least 5–6 years of professional security experience. Around 10 years or more would be ideal.
- Required Skills
- AWSPythonGCPKubernetesAzureGoTerraform
Requirements
- Have at least 5–6 years of professional security experience; around 10 years or more is ideal.
- Have hands-on experience setting up and running production cloud security tooling, such as Wiz, Upwind or a similar platform, and turning findings into fixes.
- Understand cloud infrastructure security across compute, networking, IAM, storage and service communication.
- Have practical experience with at least one of AWS, GCP or Azure and be able to reason about how cloud systems work and fail.
- Have a strong understanding of Kubernetes and cloud-native infrastructure.
- Have experience threat modelling real systems using STRIDE or a similar method, and leading engineering teams through the process.
- Bring strong software-engineering fundamentals, including the ability to reason about software architecture, distributed systems and infrastructure.
- Be able to write or review code and automation in Go or Python.
- Have strong written and spoken English.
- Kubernetes security, production cluster hardening, identity and secrets management, detection engineering, incident response, compliance frameworks, software supply-chain security, AI and agent-based system security, Terraform, and security certifications are listed as nice-to-haves.
Responsibilities
- Learn the platform architecture, infrastructure and engineering workflows, then identify security flaws and material risks.
- Set up, operate and tune cloud security tooling such as Wiz to produce actionable findings.
- Build threat models for product and backend architecture, including trust boundaries, authentication, customer-cluster access, secrets and attack paths.
- Assess and prioritise findings using evidence, business impact and exploitability.
- Present important risks to engineering teams and company leadership, and build the case for addressing them.
- Advise engineering teams on practical security improvements and drive implementation of controls for production access, identity, secrets management and secure CI/CD.
- Work with relevant teams to ensure security controls are implemented, tracked and maintained.
- Translate compliance requirements into technical work and evidence, and contribute to security standards for cloud infrastructure, Kubernetes, software supply chains and AI-enabled systems.
- Support security signals and incident-response practices while helping reduce alert noise.
- Use scripting, prototypes or code to validate risks, automate security workflows or support engineering teams.
View Full Description & ApplyYou'll be redirected to the employer's site
