Information Security Engineer improving cloud security and conducting risk assessments at fintech company. Collaborating with teams to ensure compliance and integrate security measures across the organization.
Responsibilities
Evaluate and strengthen internal security controls and processes, driving continuous improvement of our Information Security Management System and related policies
Participate in internal and external audits (e.g. ISO 270xx)
Develop and enhance threat models for PAIR Finance resources and services, conducting security risk assessments and defining targeted mitigation strategies based on threat models
Investigate end-to-end information-security incidents, preparation of comprehensive reports for management and regulators
Monitor threat intelligence, hacking techniques, and CVEs affecting our AWS and M365 environments
Collaborate with DevOps and Product teams to integrate security throughout the Software Development Lifecycle
Utilize Wiz and similar platforms to identify, prioritize and remediate cloud security risks (CSPM/CIEM)
Execute vulnerability scans, analyze DAST results, and support penetration testing activities
Requirements
Strong communication skills in English (B2+) and German (B1 minimum, B2 preferred)
Academic degree in Information Security, Cybersecurity, or equivalent field
3+ years hands-on experience securing cloud infrastructure (AWS, Azure, GCP); AWS expertise is highly desirable (SecurityHub, IAM, WAF, GuardDuty)
Solid knowledge of security frameworks such as ISO 270xx, BSI Grundschutz, NIST, SOC2
Practical experience with cloud security platforms and CSPM/CIEM (Wiz experience is a significant advantage)
Ability to write and maintain clear technical documentation
A level of technical expertise that would allow you to evaluate severity and applicability of vulnerabilities and quality of fixes in a cloud environment
Proven track record with vulnerability management, DAST tools, and penetration testing methodologies (OWASP, PTES)
Relevant certifications (nice-to-have): CISSP, CISM, CISA, ISO 27001 Lead Implementer / Lead Auditor, AWS Security Specialty, BSI Grundschutz Practitioner, AI‑related certifications (e.g. Certified AI Security Specialist)
Benefits
Thriving, financially stable company
Strong experienced international team to support and mentor you along the way, smooth onboarding process
International team of 30+ nationalities with professionals and experts
Flat hierarchy, transparent and appreciative feedback culture, monthly all hands meetings, annual feedback and evaluation cycle, regular 1-on-1s with your lead
Well-structured onboarding process as well as supportive and welcoming colleagues
Personal learning & development budget as well as German and English language courses
Good salary for your strong performance
Unlimited employment contract, flexible working hours and 28 vacation days for your work-life balance
Company pension plan, partly covered Deutschlandticket (public transport) and access to “Corporate Benefits” voucher platform to ensure your full well-being
Fun company summer and Christmas parties as well as regular team events
Security Guard ensuring safety of residential and commercial properties while performing routine patrols. Responsibilities include access verification, surveillance monitoring, and incident reporting.
Principal Security Engineer managing enterprise security SIEM and data ingestion stack. Leading a team to innovate and optimize cybersecurity solutions while ensuring compliance.
Investigate physical security concerns using OSINT methodologies at Vanguard. Conduct research, document findings, and support prescreening workflows across multiple locations.
Manager leading physical security investigations and employee prescreening at Vanguard. Collaborating with internal and external stakeholders to ensure safety and compliance in a corporate environment.
Global Security Governance Planning Lead responsible for security planning and governance frameworks at Vanguard. Overseeing compliance and operational readiness across regions while ensuring collaborative stakeholder engagement.
Enterprise Security Governance Analyst executing governance programs and supporting security assessments at Vanguard. Engaging with cross - functional teams and maintaining documentation for physical security governance.
Global Security Controls & Compliance Lead responsible for regulatory assurance in physical security across Vanguard's operations. Engage with internal and external stakeholders to ensure compliance and risk management.
Database Security Engineer responsible for implementing security systems at AIG. Protecting and maintaining the integrity of data while ensuring compliance with security standards.