Staff Cyber Security Engineer (AWS)

Kurz zusammengefasst

The role of Staff Cyber Security Engineer (AWS) at Solaris involves working with the Cloud Architecture and Engineering teams to enhance the security of the company's AWS environment. Solaris is Europe's leading embedded finance platform, offering compliant, customer-centric banking services through its proprietary modular B2B tech stack. The company empowers partners, from SMEs to large multinational companies, to provide seamless banking experiences across various industries. The main day-to-day responsibilities include auditing the current AWS environment to identify security technical debt and planning the refactoring of legacy resources into secure Terraform code. The engineer will design, deploy, and maintain AWS WAF policies and rulesets to protect corporate applications and APIs. Additionally, they will establish and enforce cloud security guardrails, multi-account structures, and Service Control Policies. The role also involves defining and auditing AWS Identity and Access Management (IAM) strategies, managing cloud-native security monitoring tools, and responding to AWS-specific security alerts. Ensuring compliance with financial regulations and security frameworks is also a key responsibility, as is leading security automatizations on the AWS environment. To qualify for this role, candidates must have a degree in Computer Science, Cloud Computing, Cyber Security, Information Technology, or equivalent professional experience. They need 5+ years of dedicated professional experience in Cloud Security Engineering, with a proven track record of securing complex AWS environments. Proficiency in AWS WAF, AWS Shield, and CloudFront, as well as advanced skills in Terraform and auditing IaC templates, are essential. Mastery of AWS native security tools and multi-account security architecture is also required. Collaboration with separate Cloud Architecture or DevOps teams and understanding of agile workflows and lean principles are crucial. Business proficient written and spoken English is a must. Nice-to-have skills include exceptional diplomatic and communication skills to align security requirements with existing teams. A structured and analytical approach to untangling legacy cloud setups and defining clear, secure milestones is valued. Being an empathetic team player who avoids silo mentality and focuses on enabling other teams to build securely is also important. Proactive peers who help the growth of the team and are curious, constant learners willing to share their knowledge are highly valued. The role is based in Berlin, where Solaris employs 300 people. The company offers a home office budget, a learning and development budget of €1000 per year, a competitive salary, a variable remuneration program, a monthly meal allowance, a Deutschland ticket subsidy, 28 vacation days, and the opportunity to work abroad for up to 12 weeks per year. What the role asks for: - A degree in Computer Science, Cloud Computing, Cyber Security, Information Technology, or equivalent professional experience. - 5+ years of dedicated professional experience in Cloud Security Engineering. - AWS WAF & Edge Security: Deep hands-on experience designing, implementing, and fine-tuning AWS WAF, AWS Shield, and CloudFront. - Advanced Terraform & IaC: Strong proficiency in Terraform and auditing IaC templates for security drifts. - AWS Security Governance: Mastery of AWS native security tools (IAM, KMS, Security Hub, GuardDuty) and multi-account security architecture. - Collaboration with Engineering: Experience working alongside separate, established Cloud Architecture or DevOps teams. - Business proficient written and spoken English. - Nice-to-have: AWS Certified Security - Specialty.