Cloud Security Engineer (m/f/d)

About Fashion Cloud

Fashion Cloud is Europe's leading B2B platform that connects over 20,000 retailers (40,000 POS) with 600 brands from 126 countries. As an all-in-one solution, Fashion Cloud offers a convenient way to exchange marketing materials and product data as well as order digitally via a central platform.

Position

Here at Fashion Cloud we are transforming the fashion industry and supporting our customers through our solid base of software products. We are looking for a Cloud Engineer with a strong security focus that can help us professionalise and secure our web platform.

As a Cloud Security Engineer at Fashion Cloud you will play a key role in ensuring the cloud security control implementation. You will be assessing our cloud security configuration. Propose improvements or innovations to the current architecture. And provide information required for compliance and audit processes. You will also look for process improvements to promote security among all engineering teams.

You will be joining the Fashion Cloud Core team, currently consisting of three engineers and counting. The team responsible for developing and maintaining core services, overall architecture, infrastructure, security, and observability throughout the Fashion Cloud tech ecosystem.

As a Cloud Security Engineer you’re able to:

• Assess the security risks over the infrastructure, architecture, applications and services

• Advise on security based improvements for our cloud architectures and application design

• Define security policies and standards that help your team implement security controls

• Develop reports and dashboards to detect emerging threats

• Design and implement disaster recovery plans

• Monitor for and respond to incidents and security alerts in the cloud environment

• Prepare and conduct security-related workshops

• Advise on DevSecOps controls implementation

• Benchmark our security controls against industry standards such as CIS, and continuously bring new ideas to harden the configuration of our stack against attacks

• Develop core services for our applications using Node.js, Angular, and/or Python

• Contribute to discussions around architecture and implement changes discussed

Your qualification

• Bachelor's Degree in Computer Science

• Solid professional experience as software developer with at least 2 years in DevSecOps environment

• Experience working with Node.js, Angular and/or Python

• Experience working with SQL and NoSQL databases (Mongo, PostgreSQL)

• Excellent communication skills and hands-on mentality

• You don't just report problems but take the initiative and solve them

• Excellent understanding of Cyber Security Operations and Incident Response processes

• Experience performing cloud security assessments

• Knowledge of web application security and secure development (SSDLC), APIs security

• Experience with infrastructure-as-code solutions

• Experience with coordinating initiatives across multiple engineering teams

• Experience with Zero-Trust architecture

• Good to have: relevant security qualifications, such as AWS Certified Security, CCSP, CISSP, ISO27001 Lead Auditor

What we offer

• Flexible working times - No 9 to 5, you are in charge of your time!

• Amsterdam-based role with 20 Days Europe Remote Working Program

• A great office - we stick to a hybrid work model (minimum 2 days per week working at the office) and enjoy flexibility between working face to face with the colleagues at the office and opportunity to work from home

• Free choice of laptop and equipment (e.g. MacBook)

• Regular team activities - Christmas party, Trivia nights and even trips abroad to celebrate success together!

• Health is wealth - Sports membership discount + mental health support by nilo.health

• Continuous education - 1000€ yearly development budget, books and free online tutorials from Pluralsight

• Sabbatical option - one month for 3 years of Fashion Cloud and 3 months if you’ve been with us for 5 years

Additional details

What happens after submitting the application?

We will start with a get-to-know-you-call with one of our friendly People & Culture Team Members.

After that we will ask you to complete a take-home-assignment where you will have to build a small application to demonstrate your technical skills.

Last but not least, you will have a technical interview with members of the engineering team. We will talk about your work experience and about relevant technical details and might use small code examples to help us illustrate the questions and answers.

We are looking forward to hear from you!