Senior Information Security Engineer (Infrastructure Security)

Our engineering group is split into roughly 60 product teams, each owning its services end to end, with on-call shared across time zones.

The position

Our team is growing and we are hiring a Senior Information Security Engineer (Infrastructure Security). We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote position. Most of the team is in Berlin, but nobody is required to come in. Few meetings, lots of written updates. Communication happens mostly in Slack and short video calls.

Job duties

• Triage bug bounty reports from HackerOne or Bugcrowd
• Write secure coding guidelines and run developer training
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Respond to security incidents and lead the technical investigation
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

Minimum qualifications

• 5-7 years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Good judgment on risk: knowing what to fix now and what can wait
• Programming or scripting ability in Python, Go or similar
• Hands-on cloud security experience in AWS, Azure or GCP

Preferred

• IaC scanning with Checkov or tfsec
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Compensation: €100,000 - €136,000 a year

What you get

• Company pension scheme
• 30 days of annual leave
• Childcare allowance
• Christmas bonus
• Urban Sports Club membership
• Up to 3 days of home office per week
• Holiday pay

Please submit your CV in English.

Candidates must be eligible to work in Germany.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Larchwood Labs.