Your missionHere at Ratepay we have a very interesting position available for a Security Engineer (SE) to join our evolving technology team and be part of our major AWS cloud migration. As our "first line" of defence to cyber security, this is a hugely important role within Ratepay that promises to reward you with unique challenges, career progression, and ownership of projects such as designing our new SIEM tooling. If you're interested in finding out more please keep reading :) Your Mission: As our Security Engineer, you'll be responsible for ensuring that the right measures for safeguarding sensitive financial data and personal customer information are in place. As a FinTech we offer digital financial services and are therefore an attractive target for cybercriminals. The SE's main responsibilities include supporting our product/infrastructure engineering teams to implement security measures to protect our customer's/partners' data from unauthorized access, alteration and theft. In addition, as our SE you will be the central contact person for colleagues from the Information Security and Compliance departments. Furthermore, our SE ensures the security of financial transactions, implementing protocols for payment security and secure communication channels and they proactively defend Ratepay against a wide range of cyber threats, such as DDoS attacks, phishing attempts, and malware infections. Compliance with regulatory requirements is another vital aspect managed by you, as we must adhere to strict regulations set by financial authorities. You will conduct security training and awareness programs for our employees to enhance the overall security posture and maintain compliance with applicable laws and regulations. Internally, you secure the company's internal systems and infrastructure from potential threats. Together with the Information Security department you conduct or coordinate regular security audits and penetration tests to identify and resolve vulnerabilities before attackers could exploit them. Key projects/challenges: Take over the ownership of our security infrastructure Support in securing our AWS cloud infrastructure Own the development, implementation, documentation and maintenance of a comprehensive new SIEM system Supporting developers in getting their applications ready for the cloud safely Review and update related security policies and guidelines What You'll Do: Your first and most important task is to review requirements regarding IT security from the Information Security and compliance area and translate them into technical requirements. In addition, you also support engineering teams to implement these requirements and validate the work result. In addition; Establishing a security infrastructure: Together with the infrastructure teams, design, implement and maintain security measures and technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus software, encryption tools and secure network architecture. Vulnerability assessment: Conduct and coordinate regular security assessments and penetration tests to identify vulnerabilities in the organisation's systems and applications. Security incident response: Develop and execute incident response plans to manage and mitigate security incidents, such as cyber-attacks or data breaches. This includes investigating security alerts and breaches, mitigating the damage and implementing remedial actions. Security policy development : Participate in the development and enforcement of the organisation's information security policies, standards and procedures. Ensure that employees are aware of and follow these policies. Data protection: Support the related teams to Implement technical and organizational security measures, including data encryption, data loss prevention (DLP) and data classification, to protect sensitive data from unauthorised access, alteration or loss. Security awareness training: Provide security awareness training to employees and inform them about common security risks, social engineering and best practices to maintain a secure work environment with focus on IT personnel. Security monitoring and analysis: Establish and manage a SIEM to detect and analyse potential security breaches or anomalous behaviour within the organisation's network and systems. Security compliance: Ensure compliance with relevant industry regulations and standards such as ZAIT, ISO 27001 and GDPR. Security documentation: Maintain and support comprehensive documentation of security configurations, policies, procedures and incident reports. Continuous improvement: Keep up to date with the latest security threats, trends and best practices. Continually update security protocols and measures to adapt to new risks and challenges. Lead and organize - the security practice group, a virtual team of security enthusiasts. That's what you bring along Cloud Security - Understanding of cloud security principles and securing cloud infrastructures (ideally AWS) SIEM tools - It is essential that you have strong knowledge of building and maintaining SIEM tool capability (Security Information and Event Management) Security tools - Familiarity with various tools such as intrusion detection/prevention systems (IDS/IPS), antivirus software, and encryption Cybersecurity - In-depth understanding of cybersecurity principles, best practices, and the latest industry trends to stay ahead of evolving threats Network Security - Proficiency in configuring and securing network devices and related cloud services (e.g. Firewalls, WAFs, VPN, Access Points) Cryptography - Knowledge of encryption algorithms and cryptographic protocols to secure data transmissions and storage Vulnerability Assessment and Penetration Testing - Ability to conduct security assessments, identify vulnerabilities, and perform penetration tests to assess our security posture Bonus Experie
Security Engineer m/f/d (Sicherheitstechniker/in (IT))Security Engineer m/f/d (Sicherheitstechniker/in (IT))