Job
In dieser Rolle setzt du Sicherheitsstandards für unsere Cloud-Infrastruktur und AI-Workloads, führst Schwachstellenanalysen durch und integrierst Sicherheitsprüfungen in unsere CI/CD-Pipeline.
Job-Technologien
Deine Rolle im Team
- At Noxtua, we're building Europe's Legal AI, and legal professionals trust us with some of their most confidential work. Security is part of what we deliver, not an add-on: we are certified to BSI C5, TISAX and ISO 27001.
- As our Security Engineer, you'll join the Tech team and set the security standard for our cloud infrastructure, our AI workloads and our product.
- You'll work closely with our DevOps team, our development and AI teams, and our Information Security Officer, and you'll be the person they turn to when something needs to be secure.
- You'll report to Simon Joecks, Chief Technology Officer at Noxtua.
- You work closely with the DevOps and Application teams and me to ensure security is delivered throughout our whole production process.
- Secure our infrastructure: set and enforce the security baseline for our cloud, GPU servers and services, including IAM, secrets and network controls, together with the DevOps team.
- Find and fix vulnerabilities: run vulnerability scanning, coordinate external penetration tests, and track findings to closure with the teams that own them.
- Build security into delivery: add security checks to our GitLab CI/CD pipelines, and review designs and code with the development and AI teams, including the risks specific to LLM applications.
- Respond to incidents: lead the technical response to security incidents, from detection and containment to the post-mortem and the fix.
- Keep us audit-ready: implement and evidence the technical controls for ISO 27001, BSI C5 and TISAX, and answer the security questions of customers and partners.
- Deputise for our Information Security Officer: stand in for the ISO, support internal audits, and help train colleagues on information security.
Unsere Erwartungen an dich
Qualifikationen
- You build security into delivery with CI/CD security checks, dependency and container scanning, and vulnerability management, and you can read Terraform and Python well enough to review them.
- You have handled security incidents from detection to post-mortem and know how to work with penetration test findings.
- You speak fluent English and German and are based in Germany.
Erfahrung
- You have 4+ years of experience in security engineering, cloud security or DevSecOps and have secured production systems yourself.
- You know cloud and infrastructure security in depth, from IAM, secrets management, and network segmentation to Linux hardening, ideally on AWS; experience with Open Telekom Cloud or other European clouds is a plus.
- You have worked in a certified environment and know ISO/IEC 27001 controls in practice; experience with BSI C5, TISAX, or internal audits is a plus, and so is an interest in LLM and AI security.
Unser Angebot
- Building Europe's sovereign Legal AI is ambitious, meaningful work - and we want the people doing it to be properly looked after.
- Our benefits are built around flexibility, real-time off to recharge, and the setup to do your best work from wherever you are.
- Remote: 100% remote work possible (given a German residence), other countries upon request.
- Working hours: Flexible working hours.
- Vacation: 26 days + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days).
- Discounts: e.g., Urban Sports Club Membership, depending on location.
- Equipment: Laptop (Lenovo or Mac), plus a home office setup budget (paid with your first salary).
Benefits
Work-Life-Integration
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Die Noxtua AG mit Hauptsitz in Berlin ist ein fortschrittliches Unternehmen, das sich auf die Entwicklung von rechtlich kompetenter künstlicher Intelligenz fokussiert. Seit ihrer Gründung im Jahr 2017 hilft die Firma Juristen bei der Recherche, Analyse und Erstellung von Rechtsdokumenten und legt besonderen Wert auf Datenschutz und Transparenz. Die KI-Lösungen entsprechen den Anforderungen der DSGVO und erfüllen hohe Zertifizierungsstandards.
- Startup
- Onsite, Hybrid, Full Remote
- Beratung
Weitere Jobs
Diese Jobs könnten dich auch interessieren
Betrieb, Überwachung und Weiterentwicklung der Netzwerk-Infrastruktur. Administration und Konfiguration von Firewalls, Routern und Switches. Sicherstellung der Netzverfügbarkeit, -performance und -sicherheit. Mitwirkung bei IT‐Sicherheitskonzepten und...
Tätigkeitsbereich Die „DRV Bund IT“ ist der Service-Provider für die Deutsche Rentenversicherung Bund und entwickelt und betreibt in enger Kundenabstimmung eine komplexe IT-Systemlandschaft. Unsere Fachdomäne „IT4IT“ schafft durch die transparente...
Wer hier einsteigt, gestaltet nicht nur Software – er bringt Maschinen zum Laufen, die man auf echten Baustellen wiedererkennt. Software-Entwickler (m/w/d) Basic Engineering Unser Auftraggeber ist ein international führender Hersteller von technisch...
