Job Description
Postcode Lotteries are already successful in the Netherlands, the United Kingdom, Sweden and Norway. Their mission is to make the world a better place for people and nature. Because of the commitment of their participants, all lotteries together are now the third largest private charity donor in the world. In Germany, more than 5.000 projects have already been supported with more than 222 million euros since the first draw in October 2016.
People with different nationalities and backgrounds work at Postcode Lotteries. This is very important to us, as diversity is an ideal breeding ground for creativity, innovation and collaboration. If you think you can make a valuable contribution to our organisation, you are welcome - regardless of your roots, religion, age, physical condition or faith.
As a Cloud Security Engineer, you will join our Cloud Core team, which is responsible for the fundamentals of our cloud landscape, including security, networking, access & permissions, backups, account provisioning, and creating standards. In this role, you will work closely with our Cyber Security team, other cloud teams, and product development teams to ensure a secure and compliant cloud environment.
Your primary responsibility will be designing, building, and maintaining security solutions within our AWS cloud environment. You will act as a consultant to other teams regarding cloud security, offering expert advice and ensuring best practices are followed. Your role will be critical in safeguarding our infrastructure and applications against potential threats, and you will be instrumental in shaping our cloud security strategy.
Your mission
- Design, implement, and manage security solutions for AWS cloud environments.
- Develop and enforce security policies, procedures, and best practices for cloud infrastructure.
- Conduct security assessments and manage vulnerabilities for cloud-based applications and services.
- Collaborate with the Cyber Security team to integrate and align security controls across the cloud landscape.
- Work closely with product development teams to ensure security is embedded throughout the development lifecycle.
- Provide expert consultation to various teams on cloud security matters.
- Monitor and respond to security incidents and alerts within the cloud environment.
- Automate security processes to enhance efficiency and effectiveness.
- Stay up-to-date with the latest cloud security trends, threats, and technologies.
- A minimum of 5 years of experience in cloud security, specifically with AWS.
- You should have strong knowledge and hands-on experience with AWS security services and best practices.
- Proficiency with Infrastructure as Code tools, specifically Terraform and CloudFormation.
- You should be skilled in scripting languages such as Python or Bash.
- Familiarity with security frameworks and compliance standards, such as NIST, ISO 27001, and SOC 2, is necessary.
- Experience with integrating security tools into CI/CD pipelines is preferred.
- A strong understanding of network security principles and practices is advantageous.
- At least one relevant certification, such as AWS Certified Security – Specialty, CISSP, or CISM.
- Degree in cyber security
- We offer each and every colleague a solid basis. In addition to your salary, you have the opportunity to take out a pension plan through us, which we subsidise. It's important for us for everyone to continue developing. Our Lottery Academy offers a range of training programmes and courses. There are also many career opportunities at home and abroad.
- We enjoy working with one another. We regularly arrange social activities – take the monthly gathering for drinks and snacks – and organize our Christmas breakfast at the end of the year that everyone looks forward to and when we look back proudly at what we've achieved together.
- Staying active keeps you fit and relaxation is good for you. That's why we offer our employees discounts at Fitness First, JobRad and Urban Sports Club, to name just a few.
- You're regularly involved in the work carried out by the charities thanks to the funds we raise for them. This includes project visits, LunchLectures and our annual Charity Gala.
- We work in a modern building just a few minutes' walk from Düsseldorf's main railway station. We encourage everyone to travel by public transport. That's why you'll also receive a Job Ticket, which you can use to travel around your region for free outside of working hours.