Security Operations Senior/Lead (f/m/d)

at  Upvest

Upvest, founded in 2017, enables any financial institution to offer great investment experiences to its customers. Upvest is an investment firm regulated by the German supervision authority (BaFin). The company currently employs 160+ people across Europe with its headquarters based in Berlin, Germany.
The company is backed by the world’s largest venture capital funds and investors including Bessemer Venture Partners, BlackRock, Earlybird, HV Capital, Notion Capital, and ABN Amro Ventures, as well as by renowned fintech entrepreneurs (including Maximilian Tayenthal, founder of N26, and Felix Haas, founder of IDnow).
We’re looking for fintech enthusiasts to join us in creating the financial infrastructure of tomorrow. We’re building the first European Investment API to enable any financial institution offering a wide range of efficient and transparent investment products, such as stocks and ETFs in nominal, portfolio, and fractional form. Our mission and vision is to make investing as easy as spending money.
We’re based in Berlin but are also open to hiring remotely in the following countries: Germany, Switzerland, Estonia, Finland, Netherlands, UK, France and Spain for this role. If you’re currently based elsewhere but would like to move to Germany, we’re happy to support your relocation.

YOUR MISSION:

We’re looking for a passionate multidisciplinary Security Operations Lead to join our Security team and lead the design, implementation and maintenance of effective security monitoring and response processes. Your job is to think like an attacker, to establish world-class SecOps capabilities in order to protect our employees and our platform. The goal of the Security team at Upvest is to help move security to the left, assist teams with producing secure solutions, and develop strong internal security controls and processes. We’re an English-speaking team, so no German knowledge will be required.

JOB REQUIREMENTS:

• A real passion for information security, staying abreast of developments in the field, and a desire to share knowledge and educate others
• At least 8 years of experience working in cyber security
• A strong foundation in general cybersecurity practices with deep technical knowledge in web application/API and infrastructure security
• Prior experience building and running security monitoring functions (e.g. SIEM)
• Prior experience using low/no code or SOAR solutions to automate a variety of security operations and processes
• Prior experience with Cloud computing and security (ideally with Google Cloud Platform)
• Knowledge of our modern tech-stack (Cloudflare, Datadog, Golang, Postgres, Docker, k8s) is a plus
• Confident understanding of Linux and macOS
• Excellent communication skills and the ability to articulate complex concepts to other Upvengers

• Report to our Chief Security Officer to support a wide range of cybersecurity tasks, with a focus on operational security topics
• Work closely with Product and Cloud Security Engineering, and TechOps teams as subject matter expert (SME) on security configurations, monitoring, detection and response
• Establish automated alerting and response processes by leveraging SIEM and security orchestration tools
• Develop solutions that augment internal security monitoring, and strengthen controls and processes
• Lead incident management activities if a security event occurs
• While the long-term goal is to build a small team, you will need to be capable and comfortable with being the sole hands-on at the start (with support from the rest of the Security team)