Security Engineer

About us:

Annual releases gave way to two-week sprints years ago, and the platform now handles over 200 million API calls a day. Our engineering group is split into roughly 60 product teams, each owning its services end to end, with on-call shared across time zones. We started in 2003 and have grown to about 460 people.

This is a new role. The team has doubled in size over the past year. The Security team is small and hands-on. We need someone who writes code and automation, not just policy. Remote within Luxembourg. The team meets in Luxembourg City once a quarter, travel covered. Standard office hours, Monday to Friday, with flexibility around them. You need a reliable internet connection and somewhere quiet to work.

Job duties:

• Write secure coding guidelines and run developer training.
• Automate security checks in CI/CD pipelines.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Respond to security incidents and lead the technical investigation.

You'll need:

• 3+ years in security engineering, application security or a related engineering role.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Pay and benefits:

Compensation: €97,000 to €118,000/year

• Pension scheme.
• Laptop and phone.
• Training budget.
• Travel allowance.
• 30% ruling for eligible candidates.
• 13th month salary.
• 8% holiday allowance.

Applications are reviewed weekly.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Coalpoint Cloud.