Master information

Task description and requirements

We are looking for a Senior Cloud Security Engineer (m/w/d) with dedicated Microsoft know-how.

German language is mandatory (C1)

Start: 01.05.2025
Duration: 12 months (potential prolongation)
Location: 100% remote, Candidate could be located anywhere in Europe
Capacity: 100%

Background Project Information:
M365 operations and AMS for a Finance captive center of an automotive OEM

Responsibilities:
Understand cloud security best practice principles including major frameworks like the CSA CCM and CIS Benchmarks, and be able to apply those principles across IaaS, PaaS and SaaS environments.
Knowledge and hands-on experience with other key components of cybersecurity such as network & infrastructure security, access and identity management, threat detection, incident response, vulnerability management, security governance, risk and compliance, security architecture, data protection and others.
Significant experience across cloud security, especially in understanding modern challenges and corresponding solutions.
Demonstrate Knowledge on cloud security domains, such as identity management, logging and monitoring, configuration management, network design, and governance frameworks.
Experience driving escalation, prioritization, and coordination of high severity Security incidents (Zero Day) and designing appropriate communication plans to all levels of the organization.


Deliverables:
Trouble shoot any cloud onboarding, agent connectivity issue
Onboarding the multi-cloud account/subscription and Kubernetes services into the CNAPP platform (Sysdig).
Integrating multiple third party security tool like SIEM, ticketing tool with the CNAPP(Sysdig) platform.
Fine tuning and automated the threat policy across different security services like workload protection, container protection, Kubernetes protection in the CNAPP(Sysdig) platform.
Delivery for a variety of cloud security projects including assessments, remediation, and managed services.
Organize and manage teams in project settings.

Professional background
Project language: German C1 (mandatory), English is must
Knowledge of Governance/ Compliance/Standards such as NIST, OWASP CSA, GDPR ISO 27001, FedRAMP, GovCloud, etc.
Good to have certifications - ISC2Experience in implementing compliance, vulnerability and threat detection and CISSP, CCSP, OSCP
Experience in TrendMicro ScanMail, MS defender for Identity & MDCA
Experience in implementing security controls in the cloud
Good understanding of cloud security architecture, security assessments,audit standards for the Cloud, security threats in the cloud.
Experience in implementing end-to-end the CNAPP (Sysdig) platform.
Experience in implementing compliance, vulnerability and threat detection and prevention policy across multi-cloud environment in the CNAPP (Sysdig) platform.

Category