Job
In this role, you will work on securing cloud platforms, implement efficient security controls in AWS and Azure, and develop security automation using Python and Terraform.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Help shape the security of cloud platforms, infrastructure, and applications.
- In this hands-on role, you will work with experienced colleagues as well as platform and development teams to implement secure configurations, identity and secrets management, and automated security controls.
- Your focus is on building reliable security capabilities, including the safe use of AI, rather than handling SOC alerts on a daily basis.
- You support the implementation and further development of security controls in AWS and Azure across identity, networking, encryption, and logging.
- You contribute to reviews of cloud architectures and infrastructure code, and work with the engineering teams to harden systems, containers, and Kubernetes workloads.
- You support the implementation of least-privilege access controls for people and workloads, and reduce shared and long-lived credentials.
- You support the integration of secrets management solutions such as HashiCorp Vault or Azure Key Vault into applications and CI/CD pipelines, as well as the automation of the lifecycle of credentials and certificates.
- You develop and test security automations using Python, shell scripts, and REST APIs, with support from your colleagues.
- You use Terraform, Git, and Policy as Code to integrate secure defaults and automated checks into deployment pipelines.
- In collaboration with the SOC, you support the configuration and maintenance of integrations for telemetry, detection, and response, including Cribl and Microsoft Sentinel.
- You will support the investigation of security incidents alongside experienced colleagues and contribute to remediating vulnerabilities in cloud environments and infrastructure.
- You contribute to application design and code reviews; you support the integration of SAST/DAST scans, dependency checks, and secrets scanning into CI/CD pipelines, and verify that identified vulnerabilities have been remediated.
- You support the assessment of AI applications, LLM integrations, and agents for prompt injection, sensitive data disclosure, and excessive permissions. You also contribute to implementing and testing access controls, output validation, and approval steps for actions with far-reaching consequences.
- You support the review of service provider deliverables and maintain practical architecture documentation, operations manuals, and operational handover materials.
- You support the implementation of verifiable controls based on governance requirements and maintain audit evidence and records documenting the remediation of findings.
Our expectations of you
Qualifications
- Familiarity with secrets management concepts and tools such as HashiCorp Vault, Azure Key Vault, or comparable solutions, as well as a willingness to develop hands-on skills in integrating and rotating credentials.
- Basic knowledge of Linux or Windows, networking, DNS, and TLS, as well as an interest in container and Kubernetes security.
- Good command of English and the ability to explain technical topics clearly.
- Initial exposure to Vault, workload identities, PKI, or Privileged Access Management.
- Familiarity with multi-cloud security, security posture management, policy as code, or automated remediation of security issues.
- Initial exposure to secure software development (Secure SDLC), Cribl/Microsoft Sentinel, or security incident investigations.
- You enjoy solving technical problems, taking responsibility for your tasks, and working closely with your colleagues.
- You ask questions, contribute ideas, and document your work clearly.
Experience
- Initial hands-on experience with AWS or Azure, as well as an understanding of IAM, networking, encryption, and logging.
- Initial experience with Python or shell scripts and Git, as well as an interest in REST APIs and Infrastructure as Code, for example with Terraform.
- Initial experience implementing or testing technical controls, troubleshooting, or contributing to technical reviews; practical skills and a willingness to learn matter more to us than degrees or years of professional experience.
- Interest or initial experience in AI security, including threat modeling for LLMs, prompt injection testing, data protection, or permission controls for agents.
- Experience in a regulated industry or familiarity with DORA/NIS2.
What we offer
- With us, you’ll find a sustainable corporate culture, a diverse range of challenging projects, and plenty of scope to shape your work, along with flexibility.
Benefits
Food & drink
Work-Life-Integration
Topics you will work on
Job locations
About your employer
At pbb Deutsche Pfandbriefbank, we are one of the leading European specialist banks for real estate financing and public investment financing. Our customers are convinced by our strong commitment, our innovative power and our industry-specific expertise.
- Established Company
- Onsite, Hybrid
- Banking, Finance, Insurance
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
