Design and maintain secure, highly available infrastructure on AWS. Apply zero-trust principles across our cloud and network perimeter
Develop custom automation scripts and tooling (using Python, Go, or Bash) to monitor compliance, eliminate manual operational overhead, and contextualize findings from detection systems
Embed automated security controls into CI/CD pipelines using GitOps principles, GitHub Actions/GitLab CI, and Infrastructure as Code (Terraform, AWS CDK). Own the security gates that ship with every deployment
Serve as the security SME for engineering, running threat modeling sessions, reviewing architectures, and translating security requirements into development tasks
Leverage Agentic AI, LLMs, and frameworks (like AWS Bedrock) to build internal tools for automated vulnerability detection and secret scanning (e.g., detecting leaked PII or security misconfigurations)

4+ years of hands-on experience in Cloud Security, DevSecOps, or Site Reliability Engineering (SRE) with a strong security focus
Deep knowledge of AWS services, specifically AWS Organization, IAM, EC2, ECS, EKS, VPC, Lambda, and Security services (e.g., GuardDuty, SecurityHub CSPM, Amazon Inspector, etc.) and well architected frameworks
Proven ability to secure complex cloud and hybrid network architectures
Understanding of IaaS, PaaS, SaaS cloud deployment models, and shared responsibility models
Strong proficiency in Python, Go, and Bash
Comfortable writing production-grade code and interacting with APIs
Familiarity with the 4 C’s of cloud native security (cloud, cluster, container, code)
Hands-on experience securing Docker containers, Kubernetes (EKS), and deploying policy and infrastructure as code via declarative tools such as Terraform and Helm
Excellent ability to translate complex security requirements into actionable development plans for cross-functional teams

Remote (Worldwide) — Austria, Europe

Bitpanda is hiring a Senior Cloud Security Engineer