Cloud Security Engineer (w/m/d)

at  Billie

We are Billie, the leading provider of Buy Now, Pay Later (BNPL) payment methods for businesses, offering B2B companies innovative digital payment services and modern checkout solutions. We are to create a new standard for business payments and have made it our mission to simplify the purchasing experience for all businesses making it a tool for growth. Our solutions are based on proprietary, machine-learning-supported risk models, fully digitized processes and a highly scalable tech platform. This makes us a deep-tech company building financial products, not the other way around. We love building simple and elegant solutions and we strive for automation and scalability.

WHO WE ARE LOOKING FOR:

• You have experience as a DevSecOps Engineer or worked in cloud security engineering
• You have in depth knowledge of automation tools such as Docker, ArgoCD, Ansible, Terraform,GitHub actions, Hashicorp Vault and security principles, protocols, cryptography, and secure network architectures, along with a solid understanding of common security vulnerabilities and attack vectors.
• You have hands-on experience with cloud security tools and technologies, such as AWS CloudTrail, AWS Config, AWS GuardDuty, AWS WAF, etc.
• You have proficient communication skills to teach the team various concepts like scalability, automation, and security
• You are self-driven and have a flexible mindset which allows you to work both independently and in multicultural teams
• You have gained a deep knowledge of a wide range of AWS services and networking in cloud environments
• Expertise in writing good quality code in any scripting language (Python and Bash preferred)
• You have a threat modelling & Research and development mindset

Reporting directly to our CISO, you will be our key player when it comes to fostering Billie’s Information Security and helping us scale it to the next level. A strong focus of the role will be automating information security in infrastructure processes and solving complex security challenges.

You will:

• Identify, remediate, and validate security issues across cloud infrastructure and Billie product (application) per industry standard information security policies
• Build, deploy, and manage production security tools and services to discover misconfiguration and weaknesses in the production environment.
• Maintain a reliable, easy to use and low-touch infrastructure using technologies such as Terraform and immutable images
• Partner closely with SRE to execute on security control implementation for Billie’s product.
• Perform architectural and design reviews through the security lens and provide timely, actionable requirements and recommendations.
• Design and implement secure, scalable, and resilient cloud architecture solutions on AWS, utilizing services such as EC2, S3, IAM, VPC, Lambda, CloudFormation, etc.
• Implement and manage security controls, encryption mechanisms, and access management strategies to protect sensitive data stored and transmitted within the cloud environment.
• Support in mitigation of technical issues in audit findings