Job
- Level
- Senior
- Job Feld
- IT, Security, Back End
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Berlin
- Arbeitsmodell
- Hybrid, Onsite
Job Zusammenfassung
In dieser Rolle entwickelst du Sicherheitslösungen für unsere cloud-native Infrastruktur, einschließlich dem Schutz von AI/ML-Workflows und der Implementierung robuster Sicherheitskontrollen für Container und Kubernetes.
Job Technologien
Deine Rolle im Team
- We are seeking an experienced Senior Platform Security Engineer to design, implement, and maintain security solutions for our cloud-native infrastructure and AI systems.
- This role will be responsible for securing our platform across multiple cloud environments, ensuring container and Kubernetes security, protecting AI/ML workflows, and implementing robust security controls throughout our SDLC.
- Design and implement comprehensive security architectures for cloud platforms (AWS, Azure, GCP).
- Implement security best practices for container and Kubernetes deployments.
- Develop and maintain secure Infrastructure as Code (IaC) codebases.
- Design and deploy zero-trust network architecture and secure service mesh solutions.
- Build and maintain secure CI/CD pipelines following DevSecOps principles.
- Secure AI-powered product features end to end, covering context assembly, tool invocation, and output handling.
- Design and review security controls for RAG implementations.
- Secure agentic solutions and their extension points: tool integrations (MCP clients and servers), agent skills, and autonomous action boundaries such as scoped credentials, sandboxing, and human-in-the-loop gates.
- Build defenses against direct and indirect prompt injection and other adversarial inputs to LLM applications.
- Establish data security controls for sensitive data flowing through inference, retrieval, and fine-tuning.
- Lead incident response for cloud and AI infrastructure security incidents.
- Develop and implement security monitoring and detection strategies.
- Conduct threat modeling and risk assessments for cloud-native and AI systems.
- Perform regular security assessments of cloud infrastructure and container deployments.
- Create and maintain security documentation, including policies, procedures, and run-books.
- Collaborate with development, data science, and operations teams to integrate security.
- Communicate security requirements and recommendations to technical and non-technical stakeholders.
- Stay current with emerging threats and security trends in cloud-native and AI security.
- Participate in technology selections for security tooling and platforms.
Unsere Erwartungen an dich
Qualifikationen
- Strong background in at least one major cloud provider (AWS, Azure, GCP).
- Expert knowledge of container security, Kubernetes security, and cloud-native security patterns.
- Proficiency with Infrastructure as Code tools (Terraform, CloudFormation, etc.).
- Strong understanding of network security, identity management, and access control.
- Working knowledge of AI/ML and LLM security, including familiarity with frameworks like TensorFlow and PyTorch and their security implications.
- Proficiency in scripting and programming languages (Python, Go, Bash).
- Familiarity with AI/LLM security frameworks (e.g., OWASP LLM Top 10) and AI governance or compliance requirements.
- Contributions to open-source security projects or public security research.
Erfahrung
- 5+ years of experience in information security, with at least 3 years specializing in cloud security.
- 3+ years of hands-on experience securing containerized environments (Docker, Kubernetes).
- Demonstrable hands-on experience securing AI/ML or LLM-based systems.
- Experience with security tooling for cloud environments (Cloud Security Posture Management, CSPM).
- Experience with security automation and orchestration.
- Deep experience securing Large Language Models (LLMs) and generative AI systems.
- Experience with secure multi-tenant AI infrastructure.
- Experience with privacy-enhancing technologies for AI/ML (differential privacy, federated learning).
- Experience building security tools or automation frameworks.
Unser Angebot
- A chance to do meaningful, people-centric work with an international team of passionate professionals.
- Holistic well-being with free mental health coaching sessions and yoga.
- A monthly allowance to spend on an extensive range of services that you can use and roll over as flexibly as you like.
- Employee stock options for all employees-because everyone deserves to benefit from the success they help to create.
- 30 annual vacation days and flexible working hours.
- Work from abroad for up to six weeks every year. Just align with your team, and then enjoy your trip.
- Plenty of opportunities to socialise as a team. In addition to internal tech meetups, our international team hosts regular get-togethers-virtually and in person when possible.
- Free tax declaration filing, of course, through the Taxfix app-and internal support for all personal tax-related questions.
- Have a four-legged friend in your life? We're happy to have dogs join us in the office.
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Taxfix GmbH
Taxfix ist eine innovative Finanzplattform in Europa, die sich auf digitale Steuerlösungen spezialisiert hat. Sie unterstützt Millionen von Nutzern in Deutschland, Großbritannien und Spanien dabei, ihre Steuererklärungen unkompliziert und sicher einzureichen. Mit mehr als 400 Mitarbeitenden und Standorten in verschiedenen Städten hat das Unternehmen über 8 Millionen Steuererklärungen bearbeitet und seinen Kunden mehr als 4,5 Milliarden Euro zurückerstattet.
Description
- Unternehmenstyp
- Startup
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Banken, Finanz, Versicherung
Senior Platform Engineer
- Ort
- Berlin
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
