11 months ago
Berlin, Germany +5 moreSenior
Responsibilities
- Design and evolve cloud security controls across AWS multi-account environments using security-as-code principles.
- Own Kubernetes security architecture, including workload isolation, RBAC, pod security standards, and network segmentation.
- Embed security automation into delivery pipelines through image scanning, IaC validation, and policy enforcement.
- Assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats.
- Maintain least-privilege IAM and secrets-management practices.
- Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design.
- Analyze network traffic and security telemetry using flow logs, metrics, and packet inspection.
- Align security practices with internal policies and CIS, NIST, and ISO 27001 frameworks.
- Maintain security architecture documentation, runbooks, and incident-response playbooks.
- Drive security awareness and secure engineering practices across teams.
Requirements
- At least 3 years of experience in Cloud Security, DevSecOps, or Infrastructure Security.
- Strong AWS security fundamentals, including IAM, KMS, GuardDuty, Config, and Security Hub.
- Solid Linux security and cloud networking fundamentals.
- Hands-on Kubernetes security experience with RBAC, NetworkPolicies, pod security, and image scanning.
- Experience with Terraform and Git-based workflows.
- Ability to script automation using Python, Go, or Bash.
- Experience with vulnerability management and container security.
- Experience with WAFs and cloud DDoS protection.
- Comfort with packet inspection, flow analysis, and traffic monitoring using tools such as tcpdump, Wireshark, and Suricata.
- Strong troubleshooting skills and a security-first mindset.
Benefits
- Hybrid work arrangement from the Berlin, Lisbon, or Warsaw offices; relocation is required if not currently based in one of those cities.
- Career growth opportunities in a rapidly expanding telecommunications company.
- Professional development alongside industry experts.
- Opportunities to work in different 1GLOBAL offices internationally.
- Collaborative, international, and open-communication work environment.
About 1GLOBAL
1GLOBAL provides eSIM-based mobile connectivity and an owned global core network for enterprises, consumers, and IoT device makers, sold via subscriptions and wholesale/MVNO services. The privately held company operates as a regulated telecom provider across 40 countries, including MVNO operations in 12 markets, and offers APIs to embed mobile service into brands and apps. Founded in 2022 by Hakan Koç and Pyrros Koussios, it is headquartered in Amsterdam.