Cloud Security Engineer in Berlin bei Billie

About the role:

Reporting directly to our CISO, you will be our key player when it comes to fostering Billie's Information Security and helping us scale it to the next level. A strong focus of the role will be automating information security in infrastructure processes and solving complex security challenges.

You will:

• Identify, remediate, and validate security issues across cloud infrastructure and Billie product (application) per industry standard information security policies
• Build, deploy, and manage production security tools and services to discover misconfiguration and weaknesses in the production environment.
• Maintain a reliable, easy to use and low-touch infrastructure using technologies such as Terraform and immutable images
• Partner closely with SRE to execute on security control implementation for Billie's product.
• Perform architectural and design reviews through the security lens and provide timely, actionable requirements and recommendations.
• Design and implement secure, scalable, and resilient cloud architecture solutions on AWS, utilizing services such as EC2, S3, IAM, VPC, Lambda, CloudFormation, etc.
• Implement and manage security controls, encryption mechanisms, and access management strategies to protect sensitive data stored and transmitted within the cloud environment.
• Support in mitigation of technical issues in audit findings

Who we are looking for:

• You have experience as a DevSecOps Engineer or worked in cloud security engineering
• You have in depth knowledge of automation tools such as Docker, ArgoCD, Ansible, Terraform,GitHub actions, Hashicorp Vault and security principles, protocols, cryptography, and secure network architectures, along with a solid understanding of common security vulnerabilities and attack vectors.
• You have hands-on experience with cloud security tools and technologies, such as AWS CloudTrail, AWS Config, AWS GuardDuty, AWS WAF, etc.
• You have proficient communication skills to teach the team various concepts like scalability, automation, and security
• You are self-driven and have a flexible mindset which allows you to work both independently and in multicultural teams
• You have gained a deep knowledge of a wide range of AWS services and networking in cloud environments
• Expertise in writing good quality code in any scripting language (Python and Bash preferred)
• You have a threat modelling & Research and development mindset