Senior Expert Cloud Security and DevSecOps
German full-service bank providing securities trading, capital-markets services, banking infrastructure, fund and account services, research, and regulated crypto-asset trading.
About Baader Bank AG
Baader Bank AG is a family-run German full-service bank headquartered in Unterschleißheim near Munich. Its current activities include market making, brokerage, capital markets, corporate access, fund services, account and custody services, research, and regulated crypto trading for institutional and private-sector partners.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will develop and implement cloud-security strategy for Microsoft Azure and AWS. You will design secure cloud architectures, establish DevSecOps processes and security standards, integrate security and compliance controls into CI/CD pipelines, conduct risk assessments and architecture reviews, and advise technical teams on cloud security.
Requirements
- Degree in computer science, business informatics, or a comparable qualification
- Several years of professional experience in cloud security, IT security, or cybersecurity
- In-depth knowledge of Microsoft Azure and/or Amazon Web Services
- Experience establishing and implementing DevSecOps processes
- Experience with Cloud Security Posture Management, container security, secrets management, and identity and access management
- Good knowledge of modern CI/CD platforms and infrastructure-as-code technologies
- Very good German and good English language skills
Responsibilities
- Develop and implement the cloud-security strategy for Microsoft Azure and AWS
- Identify, assess, and implement security requirements for cloud platforms
- Design and implement secure cloud architectures that meet regulatory and banking requirements
- Establish and continuously improve DevSecOps processes and security standards
- Integrate security testing and compliance controls into CI/CD pipelines
- Implement and improve Security-by-Design and Secure-by-Default principles
- Conduct risk analyses, security assessments, and architecture reviews
- Advise development, infrastructure, and project teams on cloud-security and DevSecOps topics
- Select, introduce, and operate security tools for cloud environments and software supply chains
- Monitor technological and regulatory developments and derive appropriate actions
Benefits
- Flexible working hours
- Home-office option, including up to 20 days per year from elsewhere in the EU
- Sabbatical option
- 30 days of annual leave, plus December 24 and December 31 off
- Employer contributions to occupational pension provision
- Employee parking
- Subsidized Deutschland-Ticket
- Subsidized company restaurant
- Health promotion
- Holiday childcare for employees' children
- Employee support through pme Familienservice
- Regular employee events