Senior Cloud Security Engineer (m/f/d) - Platform Engineering

As a Senior Cloud Security Engineer at MOIA, you will oversee the security monitoring of our AWS and Kubernetes environments, automate detection and response protocols, and manage security incidents. Your role will involve analyzing security threats, implementing necessary controls, and documenting incidents thoroughly, ensuring our cloud setups remain secure.

To apply for the Senior Cloud Security Engineer position at MOIA, you should have a bachelor’s degree in Computer Science or a related field, experience in cloud environments, particularly AWS, and proficiency in programming languages like Go or TypeScript. Previous experience managing security incidents and familiarity with industry standards such as OWASP Top 10 are also essential.

MOIA fosters a culture of continuous learning, offering opportunities such as workshops, training sessions, and conferences to enhance your skills as a Senior Cloud Security Engineer. You'll also benefit from mentorship and opportunities for job rotation to broaden your expertise within the tech industry.

At MOIA, Senior Cloud Security Engineers utilize AWS security tools, SIEM systems, and various threat intelligence methods to monitor and secure our cloud infrastructure. You'll have the freedom to extend existing tools or integrate new ones, ensuring that our security measures remain cutting edge.

While English is a must for communication at MOIA, knowledge of German is a plus but not mandatory. We highly value diverse backgrounds and encourage candidates who can communicate effectively in English to apply, making us accessible to a broader range of skilled professionals.

When answering this question, focus on the actions you took step by step, including identifying the issue, coordinating with teams, executing containment strategies, and analyzing the impact. Highlight your communication skills and any improvements made post-incident.

Discuss specific programming languages like Go or TypeScript that you've used for automation. It's helpful to mention tools you’ve integrated for monitoring, alerting, and incident response that directly relate to your experience as a Senior Cloud Security Engineer.

Explain methods you utilize for staying informed, such as following relevant blogs, attending webinars, or participating in security forums. Mention how you apply this knowledge to anticipate threats in your role at MOIA.

Talk about specific frameworks like MITRE ATT&CK that you have experience with. Discuss how you have implemented these frameworks in past roles to strengthen cloud environments against potential attacks.

Describe a strategic approach that includes an assessment of existing security postures, implementing necessary governance policies, and leveraging automation tools to maintain security in your AWS and Kubernetes environments effectively.

Share your experience with specific SIEM systems you’ve worked with, discussing how you've utilized them for security monitoring, incident response, and the valuable insights they have provided in your previous roles.

Highlight the importance of communication and teamwork. Discuss how you coordinated efforts across different teams, the processes you followed, and how you ensured that information was shared effectively during the incident.

Discuss your familiarity with the OWASP Top 10 and how these web application security risks impact cloud environments. Illustrate how you have previously identified and mitigated these risks in your projects.

Give examples of IaC tools you have used, such as Terraform or CloudFormation, and explain how automating the infrastructure helps ensure security best practices are followed in your cloud deployments.

Talk about fostering a security-first mindset through regular training, knowledge sharing, and creating a supportive environment where team members feel comfortable discussing security concerns and improvements.