Senior Infrastructure Security Engineer, Raisin
Relocation support available
Open banking for deposits and savings
Open for applications
Open banking for deposits and savings
501-1000 employees
Open for applications
Relocation support available
501-1000 employees
Company mission
To break down barriers and facilitate a transparent single market for savings and investment products.
Role
Who you are
- The ideal candidate will have a solid foundation in security architecture, Site Reliability Engineering (SRE), and DevOps principles, with a proven track record of delivering secure, scalable solutions in cloud environments
- 5+ years of experience securing cloud infrastructures (preferably AWS), managing multi-account architectures, and designing and implementing security systems to mitigate risks and ensure compliance
- Relevant certifications, such as AWS Certified Security – Specialty, are a plus
- Hands-on experience with AWS security services such as CloudTrail, GuardDuty, IAM, Config, WAF, Shield, Inspector and KMS
- Strong foundation in security architecture, Linux systems, identity and access management (IAM), and network security
- Strong expertise in Kubernetes and container security, including runtime protection and OS hardening
- Experience in vulnerability management, incident response, and compliance enforcement through automation
- Experience in administering SIEM (Security Information and Event Management) systems, such as Splunk
- Proficiency in Infrastructure as Code (IaC) and configuration management tools such as Terraform, Ansible, and Packer, along with programming languages (e.g., Python) to automate security tasks
- Passionate about security, enjoys challenges, and keeps up-to-date with emerging threats and security technologies
- Understanding of EU regulations and compliance standards, such as GDPR, ISO/IEC 27001, DORA, and other relevant frameworks for data protection, security, and operational resilience, is a plus
- Knowledge of DevOps/SRE principles and integrating security into CI/CD workflows
What the job involves
- We are seeking a Senior Infrastructure Security Engineer with extensive experience in securing cloud environments, particularly AWS
- This pivotal role will focus on managing and optimizing the security of our cloud infrastructure to safeguard against evolving threats and ensure compliance with industry best practices and regulatory requirements
- As a Senior Infrastructure Security Engineer, you will oversee multi-account AWS architectures, automate security processes, and secure cloud infrastructure, workloads, and network resources
- You will drive security improvements, implement proactive risk mitigation strategies, and ensure continuous compliance through automation and monitoring
- Manage and secure a multi-account AWS architecture, applying security controls and best practices across multiple AWS accounts and environments
- Manage cloud identities to ensure secure, compliant, and least-privileged access for users and service accounts, minimizing security risks
- Secure applications and network infrastructure to prevent malicious traffic, mitigate potential attacks, and protect the network perimeter
- Implement security guardrails and policies, and automate tasks such as monitoring, compliance checks, patch management, and remediation processes to enhance operational efficiency and eliminate misconfigurations
- Work with CWP, CSPM and CIEM tools to implement and manage centralized security operations, streamline compliance processes, and enhance visibility across the infrastructure
- Monitor Cloud infrastructure to identify vulnerabilities and misconfigurations, ensuring proactive security controls, early detection of risks, and timely patch installation and configurations to remediate vulnerabilities
- Harden host and container operating systems by adhering to security benchmarks and industry best practices to ensure robust security
- Secure Kubernetes clusters, containerized environments, and workloads following best practices for container security and runtime protection
- Integrate SIEM systems to onboard logs for centralized logging, real-time threat detection, and improved incident response
- Conduct periodic reviews and monitor networks, analyze logs, and assess systems to prevent unauthorized use, protect critical information, and ensure service availability
- Assist with compliance audits by preparing documentation and providing the necessary evidence
- Review engineering proposals, offer feedback, and suggest improvements to enhance security and operational efficiency
- Go beyond compliance to implement the latest security tools and techniques that improve the security posture of the organization
- Identify opportunities to reduce infrastructure costs, propose innovative solutions, and suggest areas for improvement. Contribute to defining the roadmap, setting priorities, and aligning with OKRs
Our take
Raisin is transforming open banking in the deposits and investments sector, leveraging its infrastructure to benefit bankers and savers in the global $50+ trillion deposit market. The company operates several B2C platforms, including Raisin, WeltSparen, Savedo, and ZINSPILOT in Europe and the UK, and SaveBetter in the US.
Raisin collaborates with around 400 banks globally, serving over 550,000 direct consumers. Backed by PayPal, Deutsche Bank, and Goldman Sachs, Raisin plans to expand further. Recently, Raisin launched its deposits platform in Poland, connecting Polish savers with European banks via its cross-border savings technology. This platform simplifies access to diverse deposit products across Europe, enhancing safety and convenience.
In late 2023, Raisin announced it had reached €50 billion in assets under administration, with significant growth in markets like Germany, the UK, the Netherlands, and the USA, and over €1 billion in net inflows each quarter in 2023.
Freddie
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 11 rounds)
Mar 2023
$68.3m
LATE VC
Jan 2022
$34.2m
CONVERTIBLE
Total funding: $313.3m
Company benefits
- Visa & Relocation Support
- 1,700 EUR Training Budget
- Free Choice of Hardware
- Beginner German Classes
- Food & Drinks
- Flexible working hours, home office and 28 vacation days
- Subsidised Urban Sports Club Membership
- Company Pension Scheme
- Team Events
Company HQ
Wrangelkiez, Berlin, BE
Leadership
Tamas Giorgadse
(CEO)Previously served as a Partner at McKinsey, and is a Non-Executive Board Member of the Bank of Georgia.
Dr Frank Freund
(CFO)Previously worked as a Senior Consultant at McKinsey.
Michael Stephan
(COO)Previously worked as a Consultant at McKinsey.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 18 more jobs at Raisin