Senior Cloud Security Engineer, BUX

• We are looking for you if you are passionate about security, you have strong technical and communication skills, and you thrive in a collaborative fintech environment
• Senior / Staff level experience in cloud security
• Expert knowledge of Google Cloud Platform (GCP) security
• Hands-on experience with Google Cloud Security Command Center Enterprise (SCC Enterprise)
• Strong knowledge of SIEM/SOAR platforms and security operations
• Experience with cloud security posture management and compliance frameworks
• Knowledge of threat detection, vulnerability management and incident response
• Understanding of regulatory compliance requirements (e.g., SOC 2, ISO 27001, GDPR, DORA)
• Experience with Infrastructure as Code security (Terraform, Kubernetes)
• Strong communication skills to collaborate across engineering teams
• Ability to translate complex security concepts for technical and non-technical audiences
• You will shape the security strategy for a high-growth fintech company that impacts millions of users
• You will work with modern cloud technologies and have the freedom to introduce security tools and practices
• You'll collaborate with intelligent, passionate peers who value security and continuous improvement
• You'll be part of a company that values your ideas and encourages innovation at every level
• You will help build secure products that democratize investing and make a real difference in people's financial lives
• You will have the opportunity to establish security best practices from the ground up as we scale

Desirable

• We are looking for a Senior Cloud Security Engineer (GCP) to join our BUX team based in Amsterdam
• Our engineering team sits at the heart of the company
• We have a well-rounded team that cares about building great products that matter
• You'll be part of a modern fintech company where you can try things, break things, fix them, and learn fast
• Your work is visible, your input matters, and you help shape both the product and how we build it
• We stay close to what's happening in investing and fintech, and we share what we learn
• It's a place where you can stretch your skills, contribute to something real, and grow alongside people who take their craft seriously and enjoy building things together
• In a fintech environment, security is not just about protecting systems; it's about safeguarding user trust, ensuring regulatory compliance, and maintaining the integrity of financial operations
• You'll have the opportunity to strengthen BUX's security posture, implement cutting-edge security solutions, and drive security awareness across our engineering organisation
• As a Google Cloud Security Expert, you will be the security subject matter expert for our engineering teams
• Strengthen the BUX security posture through proactive risk management and continuous improvement
• Implement and manage Google Cloud Security Command Center Enterprise
• Configure and maintain security monitoring, threat detection and alerting
• Conduct regular security assessments and vulnerability scans
• Develop and maintain security dashboards for visibility across cloud assets
• Implement and maintain security standards across the organisation
• Define and document security policies, standards and best practices
• Establish secure development guidelines and support teams in adoption
• Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)
• Work with the platform team to integrate security into CI/CD pipelines
• Support engineering teams with security questions, issues and guidance
• Act as the security subject matter expert for development teams
• Review and advise on security aspects of system designs and architectures
• Assist with security incident investigation and response
• Provide security training and awareness programs for engineering staff
• Manage cloud security operations
• Configure and tune threat detection rules and security alerts
• Develop automated response playbooks for common security scenarios
• Monitor and respond to security findings, vulnerabilities and misconfigurations
• Coordinate with external security partners and auditors as needed
• Drive continuous security improvement
• Stay current with emerging threats, vulnerabilities and security technologies
• Evaluate and recommend security tools and solutions
• Track security metrics and report on security posture improvements
• Includes on-call duties for security incidents

• We usually respond within three days