{"id":81432,"title":"Cybersecurity Engineer - Cloud, Ops (human)","company":"Neura Robotics","city":null,"region":"Baden-Württemberg","location":"Metzingen / Riederich, Riederich, Baden-Wurttemberg, Germany","work_model":"onsite","employment_type":"full_time","employment":["full_time"],"roles":["devops","security"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-05-05T11:11:45.399000+00:00","tools":["AWS","EKS","S3","IAM","Terraform","GitLab CI","GitLab","CI/CD"],"seniority":"mid","years_experience_min":3,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":null,"url":"https://jobs.ashbyhq.com/neura-robotics-gmbh/b043e483-4ef9-42fb-a32a-480cd3dff05c","source":"ashby","agency":null,"description_text":"Our Systems Engineering Department turns market demands into safe, certifiable, and competitive robot systems — spanning software, hardware, safety, and certification. Join us to shape the next generation of human-robot systems and find extraordinary opportunities at the intersection of security, compliance, and cutting-edge robotics.\n\nYour Mission & Challenges\n• Secure Cloud-Native Platforms: Secure cloud-native platforms (AWS EKS, Lambda, API Gateway, IoT Core, S3) via least-privilege IAM, network segmentation, secrets management, and policy-as-code (Terraform/AWS Organizations).\n• Own the AppSec Toolchain: Operate SAST (Semgrep/SonarQube), DAST (ZAP/Burp), SCA, and container/IaC scanning in GitLab CI/CD; extend coverage to Kubernetes manifests and supply chain.\n• Drive Vulnerability Management: Run risk-based vulnerability management: CVSS + exploitability rating, SLA-driven remediation tracking, and structured closure evidence for internal KPIs and regulatory reporting.\n• Perform Threat Modeling: Conduct STRIDE threat modeling across microservices, edge, and AI/ML inference pipelines; translate findings into architecture decisions.\n• Support NIS2 Compliance: Own NIS2 Art. 21 measure documentation, incident notification workflows (24h/72h), and supply-chain security assessments for cloud dependencies.\n• Define Secure Coding Standards: Define and enforce secure coding and API standards (Python, TypeScript, C++; OAuth2/OIDC, JWT) and deliver developer-oriented remediation guidance embedded in engineering workflows.\n• Lead Secure Architecture Reviews: Lead secure architecture reviews for cloud-native and AI-adjacent systems; assess AI/ML pipeline security controls (SageMaker, Triton, ONNX) and model supply chain risks.\n• Bridge to Embedded Security: Align cloud threat models and security controls with the embedded cybersecurity team to maintain end-to-end integrity from robot controller to cloud backend.\n\nWhat We Can Look Forward To\n• Education & Certification: Degree in Computer Science, Cybersecurity, or Software Engineering; OSCP or AWS Security Specialty is a differentiator.\n• Track Record: 3–5 years in application or cloud security with demonstrated ownership of AppSec tooling and vuln management in a product environment — not advisory only.\n• Security Fundamentals: Hands-on command of OWASP Top 10/ASVS, cloud security posture (AWS preferred), and DevSecOps tooling (SAST, DAST, SCA) — not just theoretical.\n• Vulnerability Management Process: Proven vuln management lifecycle: CVSS + exploitability triage, SLA-driven closure, and audit-ready documentation.\n• Regulatory Familiarity: Working knowledge of NIS2, EU CRA, ISO 27001, or IEC 62443; able to translate findings into compliance documentation for internal governance and external audit.\n• Technical Skills: Python/Bash proficiency; hands-on with container and Kubernetes security, IaC scanning, and AWS governance tooling (Config, SCPs, GuardDuty).\n• AI/ML Pipeline Exposure: Exposure to AI/ML pipeline security (SageMaker, Triton, ONNX) and model supply chain risks is a significant differentiator.\n• Collaboration & Communication: Communicates security risk clearly to engineering and management; written outputs audit-ready. Interfaces effectively with embedded security, certification, and external auditors.","responsibilities_text":null,"requirements_text":null,"status":"open","duplicate_of":null,"first_seen":"2026-11-04T00:18:09.889475+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["AWS","EKS","S3","IAM","Terraform","GitLab CI","GitLab","CI/CD","Kubernetes","Microservices","Python","TypeScript","C++","OAuth","SageMaker","ONNX","OWASP","ISO 27001","Infrastructure as Code"],"posting_language":"en","evidence":[],"years_experience_max":5,"mobility_evidence":[],"model_version":"rules-8","english_badge":"English required","company_id":2275}