EHS&S Specialist managing compliance and data systems for global animal - health services. Ensuring EHS standards and documentation across North America locations with hybrid work model.
About the role
- Cloud Security Architect shaping security architecture for scalable cloud solutions at GRAYOAK. Collaborating with cross-functional teams to ensure secure software development and architecture.
Responsibilities
- Define and evolve security standards, architecture baselines, and reference architectures for our platforms, applications, and cloud environments (Azure)
- Ensure compliance with security policies through reviews of architecture decisions, code, and Infrastructure-as-Code
- Implement and integrate security gates, policy-as-code, and automated validations into our CI/CD pipelines
- Perform threat modeling as well as security reviews and audits for applications, web applications, and platform components
- Define and review security standards for web applications and APIs (e.g., OWASP Top 10, OAuth2/OIDC, API Security)
- Advance our cloud and platform security architecture (e.g., Identity & Access Management, network segmentation, landing zones)
- Secure our AI-based applications and data flows against risks such as prompt injection or data exfiltration
- Advise and enable our development teams in secure coding, application security, and secure architectural decisions
Requirements
- Degree in (business) computer science, IT security, or a comparable qualification
- Several years of experience in security architecture, application security, cloud security, or DevSecOps in modern software and cloud environments
- Strong understanding of web application security and modern authentication and API security concepts (e.g., OWASP Top 10, OAuth2/OIDC, API Security)
- Experience with application security and DevSecOps practices, such as security reviews, vulnerability management, security testing, or CI/CD security
- Experience with cloud security architectures and relevant security services, ideally in the Azure ecosystem (e.g., Entra ID, Defender for Cloud, Key Vault, Azure Policy)
- Experience with Infrastructure-as-Code (e.g., Bicep or Terraform) and assessing its security implications
- Knowledge of policy-as-code and automated security checks within modern development and deployment processes
- Preferably experience with cloud or security compliance frameworks or relevant certifications (e.g., AZ-500, SC-100, ISO 27001, SOC 2)
- Structured, pragmatic, and communicative working style, with an understanding of security as an enabler for secure and fast product development
- Excellent written and spoken English; German language skills are a plus.
Benefits
- Flexible work: Work hybrid — in the office or from home — and adapt your working hours to your life situation
- Comfortable locations: Modern offices in central locations in Frankfurt am Main or Berlin, well connected and conveniently designed
- Learning and growth: Take the opportunity to gain hands-on experience in exciting projects and further develop your skills
- Team spirit: Enjoy regular team events, afterworks, and networking opportunities to become part of our lively company culture
- Your start: Ready from day one with IT equipment and a cool GRAYOAK merch package
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Senior Manager, IAM Control Assurance supporting identity and access management compliance within a global financial organization. Collaborating with cross - functional teams for regulatory and audit compliance.
Senior Security Engineer focusing on application security for Relativity software products. Collaborating with teams to implement security best practices and address security vulnerabilities.
Senior Security Analyst supporting Certification and Assurance at Mastercard. Managing certifications and conducting control testing against various security standards and frameworks.
Senior Information Security Engineer designing and maintaining security solutions for Utica National Insurance Group. Collaborating across teams to defend against cyber threats and ensure compliance.
Program Manager driving strategic alignment and overseeing enterprise - wide transformation programs at St Vincent's Health Australia. Leading cross - functional teams and ensuring programs deliver value within scope and timelines.
Cloud Security Specialist ensuring the security of customer services and infrastructure in cloud platforms. Implementing monitoring tools and enhancing security policies for clients’ cloud environments.
Information Systems Security Officer for federal programs, managing security and compliance in IT. Assessing risks and delivering training to enhance cybersecurity practices.
Distinguished Engineer for AI & Product Security at Workday, driving security strategy for AI technologies and cloud - native applications. Leading security architecture and complex reviews across critical products.
Hands - on Security Engineer working across multiple layers for a cloud procurement platform. Ensuring security while developing automated workflows in a global team environment.