security engineer in cloud infrastructure

Описание

PPRO provides a local payments platform that connects global payment providers with billions of consumers worldwide. Its team spans more than 50 nationalities across over 10 global locations.

Задачи

• Conduct threat modeling and security assessments across cloud environments and technology stacks
• Partner with Engineering teams to integrate security principles, practices, and tools throughout the software development lifecycle
• Design and build reusable Security as Code artefacts and patterns
• Write hardening standards and security guidelines for technologies and processes
• Own and maintain the Cloud Native Application Protection Platform
• Develop automations for auditing, cloud security posture management, and other security processes
• Maintain and expand IaC codebases and CI/CD pipelines
• Promote AI use to streamline security operations, scale defensive capabilities, and help non-security teams adopt security-first practices
• Provide technical advice on compliance matters
• Monitor emerging security trends and technologies to drive improvements

Требования

• Solid knowledge of computer networks and operating systems
• Strong AWS background and understanding of security hotspots, best practices, and security services
• Knowledge of container security best practices, including Kubernetes security
• Deep understanding of DevSecOps and CI/CD security controls
• Hands-on experience with Infrastructure as Code, preferably Terraform; CI/CD pipelines, preferably GitHub Actions; and scripting with Python and Bash
• Actively use modern AI/LLM frameworks to accelerate workflows and build scalable security solutions
• Results-oriented, collaborative, pragmatic, proactive, and committed to continuous improvement
• Strong interpersonal and communication skills; able to unblock teams and foster security awareness
• Excellent written and spoken English
• Будет плюсом: Knowledge of the Wiz platform, cloud incident or threat response experience, GCP experience, cloud penetration testing or offensive security assessment experience, familiarity with the Mitre ATT&CK framework, SIEM experience

Условия

• Hybrid work with an expectation of 3 days per week on site
• Work from abroad for up to 30 days per year
• 30 Days of annual holiday
• €1,000 Annual learning and development budget
• Accident, disability, direct (bAV), and travel insurance
• Gym membership contribution
• Enhanced family leave
• Mental health platform with therapy, courses, and guided meditations
• Pet-friendly office