Senior IT Security Engineer, Taxfix

• 5+ years of security engineering experience in corporate IT or cloud security roles
• Demonstrable experience securing public cloud environments (e.g., AWS, Azure, GCP)
• Deep understanding of cloud IAM policies, roles, and best practices for least-privilege access
• Professional experience with penetration testing and threat analysis
• Practical experience with vulnerability scanning tools (e.g., Tenable, Qualys, Nessus) and managing the lifecycle of identified vulnerabilities
• Proficiency with infrastructure-as-code tooling (Terraform preferred) and CI/CD security practices
• Proficiency in one or more scripting languages for automation, such as Python, Go, or Bash
• Deep understanding of security frameworks and methodologies, including MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks
• Familiarity with AI/LLM technologies for security applications
• Fluent in English

Desirable

• As our Senior IT Security Engineer, you won’t just secure systems—you’ll help shape a security culture that enables our teams to work with confidence, speed, and minimal friction
• We're scaling rapidly across Germany, Spain, and the UK, and our 400+ employees need robust security that doesn't slow them down
• You'll report to our Director of IT and work alongside System Engineers, Software Engineers, and IT Support Administrators to implement pragmatic security controls across our entire corporate infrastructure
• You’ll be the hands-on driver of our internal IT security landscape—ensuring that every system, tool, and endpoint used by Taxfix teams is secure by design and resilient in the face of threats
• Whether you work remotely within Germany or from our modern Berlin office in our hybrid work model, you'll have the freedom to design and implement security solutions that scale with our growth
• This isn't about creating roadblocks—it's about building security that enables our teams to work confidently and efficiently
• Implement, automate and maintain pragmatic, scalable security controls across our SaaS tooling, employee devices, IAM system, MDM solutions, AI tooling, and cloud infrastructure
• Lead incident response and management efforts, ensuring swift, effective resolution of security events impacting corporate IT operations
• Manage and optimise EDR, IAM, and device management solutions according to security best practices
• Continuously monitor, evaluate, and enhance security controls to adapt to evolving cyber threats and technological changes
• Implement and enforce IT security policies across the organisation, providing clear guidance to all departments
• Conduct light-weight penetration testing and threat analysis to identify vulnerabilities before they become problems
• Provide expert security guidance to stakeholders across Taxfix, translating complex security concepts into actionable recommendations