You’ll combine hands-on security engineering with leadership in how we organize and improve security across the company. Working with technical teams and business stakeholders, you’ll identify opportunities for improvement, set practical priorities, and drive changes through implementation and adoption.
We’re looking for someone who brings initiative, structure, and follow-through: an engineer who can configure systems, write automation, investigate issues, and help colleagues turn security requirements into everyday practices.
What you'll do
- Drive security process improvements. Review security workflows with the teams involved, identify gaps and friction, and lead practical improvements. Establish clear responsibilities, repeatable processes, and useful documentation, and help colleagues adopt and maintain them.
- Coordinate ISO 27001 activities and security policies. Use Vanta to organize ongoing compliance work, maintain control evidence, coordinate access reviews, and track remediation actions. Drive security policy and procedure updates with the relevant owners, support risk assessments and audits, and ensure documented controls reflect how teams actually work.
- Help advance security across software delivery. Work with Platform and Engineering to extend and maintain security scanning in CI/CD, covering code, dependencies, secrets, container images, and infrastructure as code. Help tune security gates, prioritize findings, and support developers in resolving vulnerabilities early.
- Contribute to Kubernetes and container security. Collaborate with Platform on implementing, reviewing, and maintaining Kubernetes NetworkPolicies, workload security settings, and access controls. Configure, operate, and tune NeuVector or equivalent runtime security tooling, investigate alerts, and adapt protections as workloads evolve.
- Help strengthen cloud and identity security. Work alongside Platform to improve cloud permissions, privileged access, service identities, secret management, and credential rotation, primarily in Azure. Contribute security improvements to cloud networking, Cloudflare access and WAF policies, and shared infrastructure automation.
- Take responsibility for endpoint security and MDM. Work with colleagues to evaluate, implement, and manage an MDM solution. Configure device enrollment, security baselines, encryption, patch policies, application deployment, compliance reporting, and secure offboarding. Help operate endpoint protection and investigate device and email security alerts.
- Coordinate security response and remediation. Work with the relevant teams to triage vulnerabilities and alerts, assess exposure and business impact, and agree remediation priorities. Participate in incident investigation, containment, recovery, and follow-up improvements, verifying that corrective actions address the issue.
- Turn priorities into delivered improvements. Maintain a practical security improvement plan, agree responsibilities with stakeholders, and communicate progress and trade-offs. Contribute automation and runbooks that make recurring security work more reliable and easier to maintain.
What we're looking for
- Practical experience in SecOps, security engineering, DevSecOps, or a platform role with substantial security responsibility.
- Experience bringing structure to evolving security processes: identifying priorities, proposing workable approaches, involving the right people, and driving improvements to completion.
- Hands-on experience with compliance and audit readiness tools such as Vanta, Drata, or similar platforms.
- Experience integrating security tooling into CI/CD and collaborating with developers to investigate and remediate findings.
- Experience implementing and administering an MDM platform, such as Rippling or a comparable solution, including device enrollment, policy management, application deployment, compliance enforcement, and lifecycle management.
- Working knowledge of cloud and identity security, ideally in Azure and Microsoft Entra ID, including least privilege, MFA, service identities, and secrets management.
- Experience supporting ISO 27001 or a comparable security framework through policy maintenance, control implementation, evidence collection, and audit preparation.
- The ability to automate tasks using Python or other programming languages and manage technical changes through Git and infrastructure as code.
- Clear communication and the ability to lead initiatives across teams through technical credibility, practical judgment, and consistent follow-through.
- Familiarity with Kubernetes and container security.
Why VaultSpeed?
- Work across cloud security, developer workflows, endpoint protection, and compliance in a modern SaaS environment.
- Collaborate directly with Platform and Engineering, contributing to both technical implementation and security priorities.
- Have room to shape security processes and see improvements through from proposal to daily use.
- Make a visible impact through stronger protections, clearer responsibilities, and more reliable security operations.
Compensation & Benefits
- Gross salary starting from €5,800 per month, depending on your knowledge, experience, and skills.
- Additional benefits and growth opportunities discussed during the recruitment process.
How we work
Security is a shared responsibility across our teams. You’ll bring dedicated expertise and leadership while working closely with the people who build, operate, and use our systems.
We prioritize improvements based on real risk, make responsibilities clear, test changes carefully, and automate recurring work. We value people who take initiative, communicate openly, and follow through on what they commit to.
Ready to help strengthen security at VaultSpeed?
Send your resume to hr@vaultspeed.com, ideally with a short example of a security improvement you personally led and implemented.
