Job
In this role, you establish security standards for our cloud infrastructure and AI workloads, conduct vulnerability assessments, and integrate security checks into our CI/CD pipeline.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- At Noxtua, we're building Europe's Legal AI, and legal professionals trust us with some of their most confidential work. Security is part of what we deliver, not an add-on: we are certified to BSI C5, TISAX and ISO 27001.
- As our Security Engineer, you'll join the Tech team and set the security standard for our cloud infrastructure, our AI workloads and our product.
- You'll work closely with our DevOps team, our development and AI teams, and our Information Security Officer, and you'll be the person they turn to when something needs to be secure.
- You'll report to Simon Joecks, Chief Technology Officer at Noxtua.
- You work closely with the DevOps and Application teams and me to ensure security is delivered throughout our entire production process.
- Secure our infrastructure: set and enforce the security baseline for our cloud, GPU servers and services, including IAM, secrets and network controls, together with the DevOps team.
- Find and fix vulnerabilities: run vulnerability scans, coordinate external penetration tests, and track findings through to resolution with the teams responsible for them.
- Build security into delivery: add security checks to our GitLab CI/CD pipelines, and review designs and code with the development and AI teams, including the risks specific to LLM applications.
- Respond to incidents: lead the technical response to security incidents, from detection and containment to the post-mortem and the fix.
- Keep us audit-ready: implement and document the technical controls for ISO 27001, BSI C5, and TISAX, and answer security questions from customers and partners.
- Deputise for our Information Security Officer: stand in for the ISO, support internal audits, and help train colleagues on information security.
Our expectations of you
Qualifications
- You build security into delivery with CI/CD security checks, dependency and container scanning, and vulnerability management, and you can read Terraform and Python well enough to review them.
- You have handled security incidents from detection to post-mortem and know how to work with penetration test findings.
- You speak fluent English and German and are based in Germany.
Experience
- You have 4+ years of experience in security engineering, cloud security, or DevSecOps and have secured production systems yourself.
- You know cloud and infrastructure security in depth, from IAM, secrets management, and network segmentation to Linux hardening, ideally on AWS; experience with Open Telekom Cloud or other European cloud providers is a plus.
- You have worked in a certified environment and know ISO/IEC 27001 controls in practice; experience with BSI C5, TISAX, or internal audits is a plus, as is an interest in LLM and AI security.
What we offer
- Building Europe's sovereign Legal AI is ambitious, meaningful work—and we want the people doing it to be properly looked after.
- Our benefits are built around flexibility, real-time off to recharge, and the setup to do your best work from wherever you are.
- Remote: 100% remote work possible (given a German residence), other countries upon request.
- Working hours: Flexible working hours.
- Vacation: 26 days + December 24 and 31 off, + 1 additional vacation day per year of employment (up to 30 days).
- Discounts: e.g., Urban Sports Club membership, depending on location.
- Equipment: Laptop (Lenovo or Mac), plus a home office setup budget (paid with your first salary).
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Noxtua AG, based in Berlin, is an advanced company focused on the development of legally competent artificial intelligence. Since its founding in 2017, the firm has been assisting legal professionals with research, analysis, and the creation of legal documents, placing a strong emphasis on data protection and transparency. The AI solutions comply with GDPR requirements and meet high certification standards.
- Startup
- Onsite, Hybrid, Full Remote
- Consulting
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
