security engineer in fintech

Solaris is Europe's leading embedded finance platform. Its full German banking license and proprietary modular B2B technology stack enable partners ranging from SMEs to multinational non-financial companies to offer compliant, customer-centric banking services. Founded in 2016, Solaris pioneered the Banking-as-a-Service market and is headquartered in Berlin.

• Audit the current AWS environment with Cloud Architecture and Engineering teams, identify security technical debt, and plan the refactoring of legacy resources into secure Terraform code;
• Design, deploy, tune, and maintain AWS WAF policies and rulesets to protect corporate applications and APIs against application-layer attacks, bots, and zero-day exploits;
• Establish and enforce cloud security guardrails, multi-account structures using AWS Organizations and Control Tower, and Service Control Policies in collaboration with the infrastructure team;
• Help define and audit AWS Identity and Access Management strategies, guiding engineering teams toward the principle of least privilege;
• Manage and optimize cloud-native security monitoring and detection tools including AWS Security Hub, GuardDuty, CloudTrail, Inspector, and KMS;
• Assist with incident response for AWS-specific security alerts, perform cloud forensic analysis, and coordinate containment strategies;
• Ensure the AWS cloud ecosystem remains compliant with relevant financial regulations, internal policies, and security frameworks including NIST, CIS, and BaFin requirements;
• Lead security automation in the AWS environment.

• Degree in Computer Science, Cloud Computing, Cyber Security, Information Technology, or equivalent professional experience;
• 5+ Years of dedicated professional experience in Cloud Security Engineering;
• Proven track record of securing complex AWS environments;
• Deep hands-on experience with AWS WAF, AWS Shield, and CloudFront;
• Strong proficiency in Terraform and auditing IaC templates for security drift;
• Mastery of AWS native security tools including IAM, KMS, Security Hub, and GuardDuty;
• Experience with multi-account security architecture;
• Experience working alongside established Cloud Architecture or DevOps teams as a security consultant;
• Understanding of agile workflows and lean principles;
• Technical leadership, cross-team collaboration, and cloud governance experience;
• Business-proficient written and spoken English;
• Exceptional diplomatic and communication skills;
• Structured and analytical approach to legacy cloud environments and secure milestones;
• Collaborative mindset focused on enabling other teams to build securely;
• Proactive approach to supporting team growth;
• Curiosity and willingness to share knowledge;
• Nice to have: AWS Certified Security - Specialty, AWS Certified Solutions Architect Associate or Professional, understanding of AWS native AI capabilities such as Bedrock or Quick.

• Home office budget;
• Learning and development budget of €1000 per year;
• Transparent growth framework;
• Competitive salary and variable remuneration program;
• Monthly meal allowance;
• Deutschland ticket subsidy;
• 28 Vacation days, increasing by 2 days after 2 years and 3 days after 3 years with Solaris;
• Opportunity to work abroad for up to 12 weeks per year.