Hybrid IT Security Cloud Engineer

at Deutsche WertpapierService Bank AG

• Job title: IT Security Cloud Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Apache, AWS, Cloud, Kafka, Kubernetes, Microservices, Spring, Spring Boot, SpringBoot, Terraform
• Location requirements: Hybrid, Frankfurt, Germany

About the role

• IT Security Cloud Engineer ensuring security on cloud platforms for financial services. Focused on operating and maintaining the dwpbank platform on AWS with security best practices.

Responsibilities

• Establishment of a future-proof event-driven microservices architecture based on Spring Boot and Kafka
• Operation, management and monitoring of the dwpbank platform based on AWS services
• Focus on IT security within the team, including operational and commercial monitoring of AWS services
• Implementation of monitoring for early detection of security incidents (SIEM, log analysis, incident response)
• Execution of vulnerability analyses, penetration tests and security audits
• Administration, maintenance, analysis and monitoring of highly available system landscapes and cloud platforms
• Automation of deployments using Infrastructure as Code (Terraform) and maintenance of Terraform modules
• First point of contact for security matters for audit units and for implementing regulatory requirements
• Support in establishing cloud security best practices
• Willingness to be on-call (on-call duty) as required in the coming years

Requirements

• Completed IT degree or equivalent qualification, including relevant certifications (AWS Security Specialty, AWS Advanced Networking Specialty or comparable certificates)
• Focus on cloud security, especially secure configuration, monitoring and incident response on AWS
• Confident handling of account setup, Identity Center and IAM
• Extensive knowledge of Kubernetes (EKS) and Terraform (IaC), as well as integration of security checks (DevSecOps)
• Experience with VPC, network topologies, Direct Connect, Route 53, MSK (Managed Streaming for Apache Kafka) and RDS
• Fluent German (C1) and good English skills (B2)
• Continuous learning mindset and willingness to share knowledge within and across teams
• Appreciative and open communication style, solution-oriented approach to challenges and change
• Quick comprehension of complex relationships and the ability to derive appropriate actions

Benefits

• Flexible working hours (flexitime) including home office options (60% remote)
• Technical equipment for the home office (monitors, keyboard, mouse)
• Performance-based compensation with attractive social benefits and perks (including capital-forming payments (VL) and company pension scheme (BVV))
• 30 vacation days & 25 days per year to work remotely from within the EU
• eGym Wellpass & care advisory service "aduna.care"
• Targeted and individual development opportunities
• Access to LinkedIn Learning
• Employee referral programme ("Mitarbeiter werben Mitarbeiter")
• Subsidised meals in our canteen
• Free Deutschlandticket (Germany-wide public transport pass) & bike leasing
• Bookable free parking spaces