Description
DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.
The Chief Information Security Office (CISO) is responsible for addressing information security risks to the Deutsche Bank global IT. As a Cloud Senior Engineer, you will play a critical role in our security Engineering team, focusing on architecting integrations with security tools, collaborating with vendors, security monitoring, threat remediation, and cloud infrastructure automation in GCP and Azure . You will be responsible for designing, implementing, and managing Google Cloud and Azure services, secure networking for multi-SIEM environments. Additionally, you will drive Infrastructure as Code ( IaC ) adoption, ensuring a secure, scalable, and fully automated cloud security ecosystem.
Responsibilities
- Design and integrate secure cloud and on-premises infrastructure, ensuring compliance with DB security policies. Architect and integrate security monitoring tools (SIEM ) into cloud environments.
- Deploy and manage scalable cloud infrastructure solutions on Google Cloud Platform (GCP) using Infrastructure-as-Code (Terraform scripts and templates ) t o automate cloud resource provisioning and SIEM configurations. Proficiency in Python for security automation, scripting and implement ing Detection-as-Code.
- Manage and optimize GitHub Actions & Runners for seamless CI/CD pipeline automation. Implement and maintain Google DevSecOps best practices, ensuring security is embedded throughout the development lifecycle and compliance is upheld.
- Configure, manage, and optimize SIEM Solution for efficient threat detection and response and c ollaborate with cross-functional teams, security vendors .
- Document infrastructure processes, configurations, and operational workflows for improved knowledge sharing and process efficiency.
Skills
The ideal candidate holds a degree in Computer Science, Engineering, Information Technology, or a related field, with a minimum of 8 + years of hands-on experience in Google and Azure Cloud security, DevSecOps practices, infrastructure automation, and third-party security tool integrations wit h Sentinel and Chronicle SIEM . Cloud Security Engineer / Architect certifications preferred.
Additionally, candidates should have recent experience in:
- Architecting and implementing cloud solutions that integrate security monitoring, threat detection and compliance tools.
- Hands-on experience in implementing security automation and infrastructure to secure cloud deployments using Terraform and GitHub Actions & Runners for CI/CD automation.
- SIEM tools and technologies, such as Google SecOps, Microsoft Sentinel , etc. In-depth knowledge of Azure and Cloud services and best practices for cloud security.
- Experience in data ingestion from Cloud services into SIEM for monitoring and threat detection. Strong understanding of DevSecOps principles and security compliance frameworks.
- Strong collaboration and communication skills to work effectively with vendors, cloud architects, security teams, and third-party service providers. A passion for cybersecurity with a strong aptitude for identifying and solving security challenges in cloud environments
Well-being & Benefits
- Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
- A professional, passionate, and fun workplace with flexible Work from Home options.
- A modern office with fun and relaxing areas to boost creativity.
- Continuous learning culture with coaching and support from team experts.
- Private healthcare and life insurance with premium benefits for you and discounts for your loved ones.
- Kids@TheOffice - support for unexpected events requiring you to care for your kids during work hours.
- Enjoy retailer discounts, cultural and CSR activities, employee sport clubs, workshops, and more.
- Competitive income, performance-based promotions, and a sense of purpose.
- 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).