Security Engineer (m/f/d) | Legal AI Tech Scale-up | Full Remote

At Noxtua, we're building Europe's Legal AI, and legal professionals trust us with some of their most confidential work. Security is part of what we deliver, not an add-on: we are certified to BSI C5, TISAX and ISO 27001. As our Security Engineer, you'll join the Tech team and set the security standard for our cloud infrastructure, our AI workloads and our product. You'll work closely with our DevOps team, our development and AI teams, and our Information Security Officer, and you'll be the person they turn to when something needs to be secure.

You'll report to Simon Joecks, Chief Technology Officer at Noxtua. With more than 15 years of experience in software development, including as Lead Software Engineer at HERE Technologies and as a research fellow at the Technical University of Berlin, Simon is an advocate for product-driven development that solves real-life problems. You work closely with the DevOps and Application teams and me to ensure security is delivered throughout our whole production process. I value strong, in-depth technical discussions and commitments to solve issues hands-on, while also building automations and strategies for prevention and scale.  

• You have 4+ years of experience in security engineering, cloud security or DevSecOps and have secured production systems yourself.

• You know cloud and infrastructure security in depth, from IAM, secrets management, and network segmentation to Linux hardening, ideally on AWS; experience with Open Telekom Cloud or other European clouds is a plus.

• You build security into delivery with CI/CD security checks, dependency and container scanning, and vulnerability management, and you can read Terraform and Python well enough to review them.

• You have handled security incidents from detection to post-mortem and know how to work with penetration test findings.

• You have worked in a certified environment and know ISO/IEC 27001 controls in practice; experience with BSI C5, TISAX, or internal audits is a plus, and so is an interest in LLM and AI security.

• You speak fluent English and German and are based in Germany.

• Secure our infrastructure: set and enforce the security baseline for our cloud, GPU servers and services, including IAM, secrets and network controls, together with the DevOps team.

• Find and fix vulnerabilities: run vulnerability scanning, coordinate external penetration tests, and track findings to closure with the teams that own them.

• Build security into delivery: add security checks to our GitLab CI/CD pipelines, and review designs and code with the development and AI teams, including the risks specific to LLM applications.

• Respond to incidents: lead the technical response to security incidents, from detection and containment to the post-mortem and the fix.

• Keep us audit-ready: implement and evidence the technical controls for ISO 27001, BSI C5 and TISAX, and answer the security questions of customers and partners.

• Deputise for our Information Security Officer: stand in for the ISO, support internal audits, and help train colleagues on information security.

• Remote: 100% remote work possible (given a German residence), other countries upon request
• Working hours: Flexible working hours
• Vacation: 26 days + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days)
• Discounts: e.g., Urban Sports Club Membership, depending on location
• Equipment: Laptop (Lenovo or Mac), plus a home office setup budget (paid with your first salary)