Senior Security Engineer
New
J
JobgetherCloud security
Based in NetherlandsFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Excellent written English communication skills
- Experience
- At least 5 years of professional experience in security engineering
- Required Skills
- AWSPythonKubernetesTerraformGitHub Actions
Requirements
- At least 5 years of professional experience in security engineering, including substantial hands-on experience securing AWS environments.
- Strong knowledge of AWS security services, particularly IAM, CloudTrail, GuardDuty, Security Hub, and WAF.
- Experience investigating incidents directly from infrastructure logs.
- Practical experience with Terraform, Kubernetes, and GitHub Actions, including reviewing infrastructure modules and CI/CD workflows.
- Programming experience in Python or a similar language to automate security workflows.
- Familiarity with APIs, CI/CD pipelines, and infrastructure automation practices.
- Experience leading an ISO 27001 or SOC 2 certification programme, ideally as the primary contact for external auditors.
- Experience managing customer security questionnaires, vendor assessments, and security due diligence.
- Strong understanding of cloud security, identity and access management, infrastructure hardening, vulnerability management, and incident response.
- Excellent written English communication skills.
Responsibilities
- Design automated evidence collection pipelines across AWS, GitHub, CI/CD systems, and identity management tools.
- Automate access reviews and develop self-service access request workflows with Platform and IT teams.
- Identify and remediate IAM weaknesses, including excessive permissions and long-lived credentials.
- Develop Terraform and CI/CD security controls, including secrets scanning, policy validation, and standardized security baselines.
- Participate in on-call and incident triage rotations; investigate security alerts and coordinate containment and resolution.
- Develop and improve detections using CloudTrail, GuardDuty, WAF, and Kubernetes telemetry.
- Review penetration testing findings, vulnerability remediation, infrastructure and IAM changes, and threat models.
- Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS programmes and coordinate external audits.
- Manage customer security questionnaires, third-party vendor reviews, security documentation, and trust materials.
- Maintain security policies and risk registers and translate regulatory requirements into security controls.
View Full Description & ApplyYou'll be redirected to the employer's site
