Level: Experienced

Job Field: IT, DevOps, Security

Employment Type: Full Time

Contract Type: Permanent employment

Salary: from 2.663 € Gross/Month

Location: Vienna

Working Model: Hybrid, Onsite

Job Summary

In this role, you monitor security events, develop incident response playbooks, and implement security solutions in AWS environments using Terraform and CI/CD pipelines.

Job Technologies

Your role in the team

Monitor security events and alerts, triage threats, and respond to incidents in a timely manner.
Develop and maintain incident response playbooks and conduct regular simulation drills.
Perform threat modeling, vulnerability assessments, and penetration testing.
Design, implement, and manage secure AWS infrastructure using Infrastructure as Code (Terraform).
Leverage AWS-native security services (e.g., GuardDuty, Security Hub, IAM, WAF).
Embed security best practices into CI/CD pipelines.
Automate security testing and compliance checks in build pipelines.
Ensure adherence to frameworks such as NIS2, GDPR and other relevant regulations.
Assist with security audits, risk assessments, and compliance reporting.
Maintain up-to-date security documentation and policies.

This text has been machine translated. Show original

Our expectations of you

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.

Qualifications

Knowledge of CI/CD pipeline security and common security frameworks.
Strong analytical, communication, and collaboration skills.
Fluent English (written and spoken).
Programming/scripting skills (Bash, PowerShell, Python, TypeScript, Go) are nice to have.
Knowledge of AWS security services and configurations is nice to have.
Relevant certifications (e.g., CompTIA Security+, AWS Certified Security - Specialty, CISSP) are nice to have.

Experience

2-3 years of professional experience in a security-related role.
Proven experience securing AWS cloud infrastructure.
Deployment experience with Terraform or equivalent IaC tooling.
Hands-on experience with incident response, vulnerability management, and security assessments.