Job
In this role, you implement security solutions for cloud platforms, evaluate architectures, develop security automation, and integrate secrets management tools into CI/CD pipelines.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You embed security into cloud platforms, infrastructure, and applications.
- In this hands-on senior role, you will work with platform and development teams to develop and implement secure configurations, identity and secrets management, and automated security controls.
- Your focus is on delivering reliable security solutions, including the safe use of AI—not on handling SOC alerts on a daily basis.
- You develop and improve security controls for AWS and Azure across identity, networking, encryption, and logging.
- You review cloud architectures and infrastructure code, and work with engineering teams to harden systems, containers, and Kubernetes workloads.
- You implement access controls based on the principle of least privilege for people and workloads, and reduce shared and long-lived credentials.
- You integrate secrets management solutions such as HashiCorp Vault or Azure Key Vault into applications and CI/CD pipelines, and automate the lifecycle of credentials and certificates.
- You develop and test security automations using Python, shell scripts, and REST APIs.
- You embed secure defaults and automated checks in deployment pipelines using Terraform, Git, and Policy as Code.
- You will work with the SOC team to develop integrations for telemetry, detection, and response, including with Cribl and Microsoft Sentinel.
- You support the handling of complex security incidents at L3 level and implement sustainable solutions for vulnerabilities in cloud and infrastructure.
- You review application designs and code, integrate SAST/DAST as well as dependency and secrets checks into CI/CD pipelines, and verify that identified vulnerabilities have been remediated.
- You test AI applications, LLM integrations, and agents for prompt injection, sensitive data exposure, and excessive permissions.
- You implement and test access controls, output validation, and approval steps for actions with far-reaching consequences.
- You review the deliverables of service providers and maintain practical architecture documentation, operations manuals, and handover documentation.
- You translate governance requirements into verifiable controls and maintain audit evidence and vulnerability remediation records.
Our expectations of you
Qualifications
- Python, shell scripts, REST APIs, Git, and Infrastructure as Code, for example with Terraform.
- Fluent English skills and the ability to clearly explain technical decisions and trade-offs.
- You take ownership, solve problems pragmatically, and work closely with the engineering teams.
- You communicate clearly, document carefully, and offer solutions—not just problems.
Experience
- Practical experience in security engineering with AWS or Azure, as well as in-depth knowledge of IAM, networking, encryption, and logging.
- Practical experience with HashiCorp Vault, Azure Key Vault, or comparable solutions, including integration, access policies, and credential rotation.
- Solid foundational knowledge of Linux/Windows, networking, DNS, and TLS, as well as experience with container and Kubernetes security.
- Experience in building security controls, reviewing designs and code, and verifying remediation measures.
- In-depth experience with Vault, workload identities, PKI, or privileged access management.
- Experience with multi-cloud security, security posture management, policy as code, or automated vulnerability remediation.
- Experience with AI security: threat modeling for LLMs, prompt injection testing, data privacy, and access controls for agents.
- Experience with a secure software development lifecycle (Secure SDLC), Cribl/Microsoft Sentinel, or investigating complex security incidents.
- Experience in regulated industries or knowledge of DORA/NIS2.
What we offer
- With us, you’ll find a sustainable corporate culture, a diverse range of challenging projects, and plenty of scope to shape your work, along with flexibility.
Benefits
Food & drink
Work-Life-Integration
Topics you will work on
Job locations
About your employer
At pbb Deutsche Pfandbriefbank, we are one of the leading European specialist banks for real estate financing and public investment financing. Our customers are convinced by our strong commitment, our innovative power and our industry-specific expertise.
- Established Company
- Onsite, Hybrid
- Banking, Finance, Insurance
More jobs
These jobs might also interest you
Hello, let's say WE! We - the HUK-COBURG Insurance Group - are among the top 10 in Germany. Founded over 90 years ago, we are now the leading insurer for private households with over 13 million customers and the largest German auto insurer. Our...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
You actively shape the technical development of our software products and influence their long-term architecture. You develop our core applications primarily using C# as the central programming language and technological foundation. You design, develop,...
