Cloud Security Engineer (m/f/d)

Checkmk is seeking a Cloud Security Engineer to advance security for its cloud-native monitoring solution on AWS. The role will harden and automate existing security frameworks, develop DevSecOps practices, strengthen AWS and EKS security, and advise engineering teams on secure development.

Responsibilities:

• Lead the Security Evolution: Take ownership of our security roadmap, moving from a developer-led security model to a specialized, automated DevSecOps practice
• Advanced AWS Hardening: Deepen our infrastructure security by implementing advanced AWS configurations (e.g., Service Control Policies, refined IAM boundaries, and specialized GuardDuty/Macie integration)
• Automate the "Shift-Left": Integrate sophisticated security gates into our existing CI/CD pipelines, ensuring that hardening is a silent, automated partner to our deployment process
• Kubernetes Security Specialist: Enhance our EKS security posture, implementing advanced network policies, runtime security, and automated vulnerability remediation
• Bridge the Gap: Act as the primary consultant for the engineering team, helping to balance rapid feature development with high-assurance security standards

Requirements:

• 4+ years in Cloud Security, with focus on high-available SaaS products
• You have a proven track record of securing complex AWS environments
• You know how to leverage AWS-native security tools to their full potential without creating friction for developers
• You are an expert in Terraform, believing that if a security policy isn't in code, it doesn't exist
• Deep knowledge of the CNCF security landscape - you know how to protect the cluster, the pod, and the code
• You are a "Security Builder and Enabler," not a "Security Blocker."
• You enjoy teaching others and building consensus on technical standards
• You enjoy the "chess game" of security - anticipating risks before they manifest and building systems that fail safely
• Business fluent English
• German is a plus