Cloud Security Engineer

About This Opportunity

We are representing a well-funded technology organization in the AI sector that is scaling rapidly to serve enterprise clients across Europe. They need a Cloud Security Engineer to own security engineering across their cloud platform, APIs, and corporate infrastructure.

This is a hands-on security engineering role with leadership potential. You will directly own security work—code review, incident response, cloud hardening, and API security—while building the security function as the organization grows. You will work closely with engineering teams, enterprise clients, and compliance programs including SOC 2.

The role is fully remote within EU or African time zones (±3 hours from CET), 40 hours per week.

Responsibilities

You will own security across multiple domains:

• Application security: Hands-on code and architecture review of APIs, backend services, and tooling. Conduct targeted penetration testing and work directly with engineers on fixes and root causes. Manage vulnerability programs and coordinate external penetration tests.
• Detection and response: Build and maintain alerting, intrusion detection, incident processes, and on-call security response.
• Cloud and platform hardening: Secure access control, network boundaries, secrets management, containers, CI/CD pipelines, repositories, and dependencies throughout the SDLC.
• API security: Design and implement authentication, authorization, tenant isolation, token management, abuse prevention, enterprise SSO, and audit trails.
• AI system security: Address prompt injection, agent and tool permissions, MCP servers, retrieval systems, data ingestion, and contractual data-residency requirements.
• Identity and corporate security: Manage SSO, MFA, privileged access, onboarding/offboarding, access reviews, MDM, endpoint security, and SaaS access governance.
• Secure design: Conduct threat modeling and design reviews that enable engineering teams and raise overall security standards.
• Security function leadership: Set priorities and roadmap based on actual risk. Decide what to build, buy, automate, or defer. Grow the security team, represent security to enterprise clients, and lead SOC 2 compliance programs.

Technology environment: Go backend services, PostgreSQL, Redis, PaaS-managed containers, Cloudflare, Jaeger tracing, BetterStack observability, Drata compliance tooling, and Claude Code across the engineering organization.

What We're Looking For

Required qualifications:

• 5+ years of hands-on security engineering experience spanning multiple disciplines—not general engineering with some security exposure
• Deep application security expertise: understanding how modern web applications and APIs are attacked, with ability to validate issues through code review or penetration testing
• Strong command of authentication and authorization: OAuth, OIDC, sessions, token handling, access control, and common API security failure modes
• Proven cloud security experience: identity, network, workload, and pipeline security applied to production cloud platforms
• Defensive security background: real incident investigation and building detection/alerting systems
• Threat modeling and secure architecture design for cloud, container, and API environments
• Engineering background: comfortable reading and reviewing code, understanding what engineers produce, and building security tooling when needed (Go backend experience is a plus but not required)
• Experience in resource-constrained environments (startups, small security teams, or consultancies) with demonstrated ability to prioritize based on risk and business impact
• Desire to build and eventually lead a security team (prior leadership experience valued but not required—depth over titles)
• Working proficiency with Claude Code and AI-assisted development workflows
• Experience with SOC 2, ISO 27001, or enterprise security reviews
• Excellent spoken and written English for client, auditor, and internal communications
• Located in European or African time zones (±3 hours from CET)
• Available full-time (40 hours per week)

Valued additional experience:

• AI and LLM security: prompt injection, agent permissions, model security, retrieval systems
• Early security hire at a startup or scale-up
• Security team leadership or mentorship
• Go programming
• Security tooling or automation development
• MDM, endpoint protection, and identity provider administration
• Compliance automation platforms (Drata, Vanta, Secureframe)
• Security certifications
• GDPR expertise
• German language skills

You're an excellent fit if you:

• Approach security as an engineering discipline focused on shipping fixes and guardrails
• Can explain technical vulnerabilities to engineers and business risk to client security leaders
• Have offensive security experience (pentesting or consulting) and want broader ownership than producing reports
• Want to build and own a security function rather than advise from the sidelines
• Can balance challenging unnecessary security bureaucracy while addressing genuine engineering risks
• Value speed of remediation over process overhead

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your security engineering background, hands-on experience, and interest in this role. Once we determine mutual fit, we submit your profile to our client for their review.

Important: Please do not attempt to contact the client organization directly. All communication and coordination flows through Get A Job.ai to ensure a professional process for all parties.

Pay

Compensation details will be discussed during the screening process based on experience level and location within the eligible time zones.

Get A Job.ai is an equal opportunity recruiter. We work with clients and candidates without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.