20 days ago
Copenhagen, DenmarkStaff+
Responsibilities
- Design and build pipeline-integrated image scanning, SBOM generation, and CVE response capabilities with tracked remediation SLAs.
- Lead design and tooling for a unified internal network and VPN across GCP, AWS, and Veo’s offices.
- Partner with authentication maintainers on MFA, shared-account removal, token lifecycle management, and identity and access patterns.
- Build workload identity for CI/CD using OIDC between GitHub Actions and AWS or GCP.
- Create shared audit logging and GRC evidence capabilities that produce auditable output with minimal manual work.
- Own the contracting, intake, classification, and tracking process for external penetration tests.
- Document and hand off capabilities with runbooks, named owners, escalation paths, and office-hour support.
- Set technical direction for quarterly missions, mentor the team, and raise the organization’s security standards.
Requirements
- Several years of production infrastructure and security experience, with deep expertise in platform security or identity and readiness to develop in the other area.
- Hands-on experience operating vulnerability, CVE, and image-scanning programs at scale.
- Experience working in authentication codebases, rolling out MFA, and managing CI/CD token lifecycles with OIDC and workload identity.
- Experience designing and operating secure internal networks across multiple cloud providers and offices, including VPN solutions.
- Experience building internal security tooling and paved roads adopted by other engineering teams.
- Strong Infrastructure as Code experience with Terraform, Crossplane, or similar tools.
- Preferred experience with Flux, ArgoCD, Cilium, Kubernetes security at scale, and security-oriented GRC evidence pipelines.
- Applicants who match only some of the listed qualifications are encouraged to apply.
Benefits
- Copenhagen-based role on a security enablement team with collaboration across Platform, Product, IT, Firmware, and GRC teams.
- Access to an office with an indoor ball court, rooftop terrace, and well-equipped gym.
- Inclusive workplace that welcomes applicants from diverse backgrounds and values growth and learning.
Tech Stack
Categories
