Apply Now
Application opens on company website
Job Description
The Senior Cloud Security Engineer is responsible for designing, implementing, and maintaining security measures across Celonis's multi-cloud infrastructure, ensuring the protection of SaaS platforms through automation, monitoring, and collaboration with development teams.
Key Responsibilities
- Design and implement security measures across multi-cloud environments (AWS, Azure, GCP).
- Harden cloud infrastructure by configuring network controls, encryption, and logging.
- Secure containerized applications and Kubernetes clusters, including image scanning and policy enforcement.
- Develop and maintain automation scripts and Infrastructure-as-Code for security deployment and compliance.
- Enhance cloud security monitoring, identify vulnerabilities, and investigate security incidents.
- Manage and improve cloud Identity and Access Management (IAM) configurations and access controls.
- Conduct vulnerability scans on cloud assets and container images, and remediate identified issues.
- Collaborate with development and operations teams to advise on secure architecture and practices.
Requirements
- Proven Cloud Security Expertise with 5 years of hands-on experience in security engineering focusing on cloud environments including AWS, Azure, and GCP, with deep understanding of cloud architecture and services, and proven experience implementing security controls in a production cloud environment.
- Strong experience securing containerized applications and Kubernetes clusters, including familiarity with tools and practices for container security such as container image vulnerability scanning, runtime security, Kubernetes network policies, and service mesh security.
- Proficiency in Infrastructure-as-Code and scripting, with demonstrated ability to use Terraform, CloudFormation, or similar tools to deploy secure configurations, and to write scripts in Python, Go, or Bash to automate security workflows.
- Hands-on experience with Cloud Security Posture Management (CSPM) solutions or implementing automated checks for cloud compliance, with the ability to identify misconfigurations and weaknesses in cloud setups such as S3 bucket policies and resource exposure, and remediate them.
- In-depth understanding of cloud Identity and Access Management (IAM) and access control mechanisms, including experience designing role-based access schemes, managing federated identities such as SAML and OIDC, and implementing principles of least privilege across multiple cloud accounts and services.
- Experience with vulnerability scanning tools such as Tenable, Nessus, or Qualys, including interpreting their output, and knowledge of common cloud threats and vulnerabilities such as OWASP Cloud Top 10 and CIS benchmarks, with a track record of remediating security issues in real cloud deployments.
- Ability to serve as a security subject matter expert for cloud projects, collaborating with developers, DevOps, and SRE teams to advise on secure architecture and coding practices, participate in threat modeling exercises, and review new features and infrastructure for potential security risks before deployment.
- Formal degrees or certifications are less important than proven ability to do the job, with emphasis on hands-on problem-solving skills and security achievements in real-world cloud environments.
Benefits & Perks
generous PTO
hybrid working options
company equity RSUs
comprehensive benefits
extensive parental leave
dedicated volunteer days
access to resources such as gym subsidies, counseling, and well-being programs
benefit from clear career paths, internal mobility, a dedicated learning program, and mentorship opportunities
connect and support through dedicated inclusion and belonging programs
opportunity to work with leading process mining technology
international team collaboration
contribute ideas in an open, autonomous environment
Ready to Apply?
Join Celonis and make an impact in renewable energy
Stay Updated on Sustainability Jobs
Get the latest renewable energy jobs and career tips delivered to your inbox.
Job Alerts
Get notified about new sustainability jobs
More at Celonis
More jobs at Celonis
Account Receivable Specialist
Celonis
NEW
Madrid
Full Time
6h
Senior Software Engineer - Fullstack
Celonis
NEW
Bangalore
Internship
6h
Senior Value Engineer
Celonis
NEW
Bangalore
Full Time
6h
More jobs in Munich, Germany
Client Delivery Lead - Residential Flex (f/m/d)
Kraken
Munich
Full Time
Jan 30
Customer Success Manager German Speaking
Pure Storage
NEW
Munich
Full Time
2d
Account Executive, Portworx - Strategic Accounts Manufacturing EMEA
Pure Storage
Munich
Full Time
Feb 25