Cloud & Infrastructure Security Engineer

Make an impact

• Design and implement secure architectures for Azure and other cloud environments
• configure and manage cloud-native security tools (e.g. Microsoft Defender for Cloud MS Sentinel MS Defender for Server Fortinet Cloud Firewalls etc.)
• establish and maintain cloud security baselines policies and guardrails
• conduct cloud security assessments and support remediation activities
• define and maintain cloud network security policies (firewalls NSGs segmentation)
• secure and harden cloud and on-prem workloads: storage compute virtualization and cloud networking
• implement Zero Trust principles across cloud and on-prem environments
• perform vulnerability assessments and coordinate remediation with Infrastructure teams
• manage access governance across cloud and infrastructure systems
• integrate infrastructure logs into SIEM (e.g. MS Sentinel)
• create advanced detection rules for cloud and infrastructure threats
• collaborate with SOC during investigations and improve detection capabilities
• develop runbooks for cloud/infrastructure-related security incidents
• automate security controls using scripts (PowerShell Python) and Infrastructure as Code (Terraform Ansible)
• integrate security into CI/CD pipelines and infrastructure deployment processes
• build automation for monitoring remediation and compliance reporting
• ensure compliance with frameworks (ISO 27001 NIST GDPR)
• contribute to audits risk assessments and documentation
• maintain security architecture diagrams standards and technical guidelines.

What you need to succeed

• Bachelors degree in Computer Science Information Security or equivalent experience
• 3 years of hands-on experience in IT security engineering or architecture
• several years of professional experience in the position as a Cloud Engineer IT System Administrator DevOps Engineer Infrastructure Architect or in a similar position
• deep technical knowledge of:
• Microsoft Azure (preferred) or AWS/GCP and their security concepts/tools
• IAM (EntraID) Zero Trust encryption logging
• Windows/Linux hardening
• Network security (firewalls segmentation)
• experience with:
• SIEM/SOAR tools (e.g. MS Sentinel)
• PowerShell / Python scripting
• Security automation (PowerShell Terraform Python Logic Apps Functions)
• Containers & Kubernetes security
• strong understanding of cloud attack vectors incident response and threat modeling
• several years of experience in working with enterprise scale IT systems including network firewall databases scripting and automatization
• security & ITIL processes are part of your DNA
• working in an international team gives you motivation
• fluent in English
• german knowledge is an advantage
• additional skills and certifications are a clear plus (AZ-500 AZ-305 CCSP CISSP GCIH GCSA)
• familiarity with MITRE ATT&CK (Cloud Enterprise).