Description

You will lead the design and automation of security controls for the company's legal AI assistant, ensuring robust protection for top-tier law firms through advanced engineering and incident response.

Requirements

• •Experience operating cloud security controls
• •Knowledge of IAM, SSO, and access design
• •Proficiency in network and perimeter security
• •Experience with secrets and key management
• •Experience building SIEM and log pipelines
• •Familiarity with vulnerability management and CI/CD
• •Understanding of European data protection compliance
• •Excellent English and German communication skills
• •Entrepreneurial mindset and independent work style
• •Participation in interviews without AI tools
• •Willingness to appear onsite for recruitment

Tasks

• •Secure internal and external traffic across OTC and Azure
• •Implement network segmentation, mTLS, WAF, and IDS/IPS
• •Define and operate IAM and RBAC policies
• •Manage SSO/SCIM provisioning and least-privilege access reviews
• •Govern sensitive data access with policy-based controls
• •Implement data masking and query auditing workflows
• •Manage secrets, key rotation, and encryption standards
• •Build audit logging and SIEM pipelines
• •Develop correlation rules, alert tuning, and dashboards
• •Lead incident response readiness and forensic execution
• •Integrate SCA, SAST, and DAST into CI/CD pipelines
• •Drive vulnerability remediation and container hardening
• •Secure endpoints and runtime systems using EDR
• •Conduct security reviews and architectural threat modeling
• •Embed security controls into Terraform and Ansible
• •Promote a security-first culture through training and standards

Tools & Technologies

Benefits