Requirements

BS in Computer Science, Information Security, System administration or equivalent professional experience.
Good understanding of security fundamentals (CIA triad) and computer networks (OSI model, TLS). Experience with Cloud Security tooling like CSPM, CNAPP, WAF is a plus.
Proven track record of experience with AWS and security related services like WAF, Guardduty, Cloudtrail, IAM. Experience with other CSPs are a plus.
Experience with shipping infrastructure changes with baseline quality on tests, scalability, and security.
Experience with container orchestration: Kubernetes.
Demonstrated capacity to work with CI/CD pipelines.
Experience with any paradigm of Infrastructure-as-Code (IaC) like Terraform, Cloudformation, AWS CDK. Any development or scripting experience is a plus.
Excellent English written and verbal communication skills and the ability to adapt messaging to executive, technical, and non-technical audiences.
Ability to drive and support technical, security and architectural infrastructure reviews.
Ability to work with a high degree of autonomy.

Nice to Haves

Experience with Cloud Security tooling like CSPM, CNAPP, WAF is a plus.
Experience with other CSPs.
Experience with any paradigm of Infrastructure-as-Code (IaC) like Terraform, Cloudformation, AWS CDK. Any development or scripting experience is a plus.

Identify risks on the scope of Cloud Security and propose scalable solutions for it
Interface with our Site Reliability Engineering team to ensure we get the most security impact while complementing the SREs goals to deliver a scalable on-demand infrastructure by being the subject matter expert (SME) in security
Implement security control that prevents misconfigurations of cloud resources, security observability of best practices about cloud infrastructure
Update and improve Cloud Security Standards by working with the SRE team, detecting drift between standards and provisioned infrastructure in production
Participate in security operations, responding to security incidents and providing security expertise for Personio customers and internal stakeholders
Keep yourself up to date about the cloud native technologies that Personio uses and how it overall impacts security
Provide guidance inside the Security team on the golden path for provisioning infrastructure

Receive a competitive reward package – reevaluated each year – that includes salary, benefits, and pre-IPO equity
Enjoy 28 days of paid vacation, plus an additional day after 2 and 4 years (because we love what we do, but we also love vacation!)
Make an impact on the environment and society with 2 (fully paid) Impact Days – one for an individual project of your choice and one for a company-wide initiative
Receive generous family leave, child support, mental health support, and sabbatical opportunities with PersonioCares
Find your best way to work with our office-led, remote-friendly PersonioFlex! Most teams offer a roughly 50% remote, 50% in-office working framework
Invest in your development with an annual personal development budget to use on professional memberships, external certifications, conferences, and more
Connect with your fellow Personios at regular company and team events like All Company Culture Week and local year-end celebrations
Engage in a high-impact working environment with flat hierarchies and short decision-making processes