Lead Cloud Security Engineer (f/m/x) – Online Tribe

at  Deutsche Bank

POSITION OVERVIEW

English version below
Der Online Tribe der DB Private Bank Germany ist für den Online Banking Privatkunden-Zugangskanal der Deutschen Bank und Postbank in Deutschland verantwortlich. Das Anwendungsportfolio beinhaltet ein modernes cloud-basiertes Online & Mobile Banking, Administrationsfrontends für interne Anwender und eine Vielzahl weiterer innovativer und anwenderorientierter Lösungen. Wir sind ein Team enthusiastischer Experten, die im internationalen Umfeld arbeiten, sich unterschiedlichen Herausforderungen stellen und neue Technologien und Bereiche im Rahmen der Geschäftstätigkeit der Deutschen Bank erlernen.
Die Bereitstellung kundenorientierter Lösungen mit herausragender Benutzererfahrung motivieren uns jeden Tag unser Bestes zu geben. Dabei haben wir an uns selbst den Anspruch technische Lösungen umzusetzen, die höchsten Anforderungen an Verfügbarkeit, Performance, Skalierbarkeit und Sicherheit entsprechen.
Komm zu uns und sei Teil der nächsten großen Sache im New Banking!

COLLABORATION SKILLS ARE A SUCCESS-FACTOR SO YOU SHOULD HAVE

• Proactive can-do attitude
• A creative approach towards solving technical problems
• Ability to collaborate and problem solve across teams
• Ability to support incident response when required
• Able to work efficiently with colleagues in multiple locations
• Willing to collaborate across domains, for efficiency in technology sharing and reuse
• Excellent communication skills in English
  W hat we offer
  We provide you with a comprehensive portfolio of benefits and offerings to support both, your private and professional needs.

• Expert knowledge of security capabilities and security aware implementations
• Expert hands-on experience in risk assessment, mitigation design, prioritization, and implementation
• Expert communication skills to provide needed calmness in urgent incident topics function as the proxy between the teams and the CSO
• Expert hands-on experience in mitigation management for respective OWASP Top 10
• Expert capability to quickly analyse the security implications of topics outside of your common realm and advise on risk reduction
• Expert hands-on experience with service-mesh technology such as Istio or similar products
• Expert experience with automated certificate management as well as mTLS configurations in Versions and ciphers
• Advanced experience with automated infrastructure provisioning based on IaC providers (e.g. Terraform)
• Advanced experience with various threat modelling frameworks
• Advanced hands-on experience with Continuous Integration / Continuous Deployment pipelines and patterns using GitHub Actions or similar.
• Very good hands-on experience with Kubernetes-based container platforms such as GKE or similar technology as well as experience with container technology (Docker)
• Very good hands-on experience with a leading cloud platform (GCP, AWS, Azure), it’s services and their respective capabilities, configuration setting and provisioning methods
• Very good experience in policy as code solutions
• Very good understanding of Microservice architectures and experience with API Management e.g., Apigee or WSO2
• Experience in scripting in at least one language