Senior Security Engineer – Cloud Security & Security Operations (f/m/d)

Senior Security Engineer – Cloud Security & Security Operations (f/m/d) At Moss, we give finance professionals the power to automate their day-to-day and make forward-thinking decisions. Our team and culture make us unique — we’re driven by impact and growth, where every one of us strives to learn and excel. Recognised by Sifted’s Rising 100 https://sifted.eu/rankings/b2b-saas-rising-100-2024 and LinkedIn's Top Startups https://www.linkedin.com/pulse/linkedin-top-startups-2024-20-aufstrebende-unternehmen-bjd0c/, we’re here to help propel your career and together, make Moss a lasting success. Our Information Security team is seeking a Senior Security Engineer (f/m/d) focused on Cloud Security and Security Operations. Your role will be instrumental in strengthening and scaling our cloud security architecture, detection capabilities, and incident response maturity across Moss’ infrastructure and SaaS ecosystem. You will work in close partnership with our Staff Security Engineer for Product and Application Security, forming the senior technical security core at Moss. Together, you will ensure that cloud infrastructure, runtime detection, and product-layer security operate as a cohesive, high-signal security system. Reporting to the Director of Information Security, you will take ownership of how Moss detects, prioritises, and responds to security risks across GCP, SaaS systems, and internal services. YOUR RESPONSIBILITIES You will act as the bridge between Security, Platform, and Engineering teams, owning the following areas: OWN AND STRENGTHEN OUR CLOUD SECURITY POSTURE Design and continuously improve Moss’ security architecture in GCP, including IAM design, organisational policies, logging strategy, and network controls. Own and evolve our Cloud Security Posture Management setup in Wiz, prioritising and driving remediation of misconfigurations, identity risks, vulnerabilities, and runtime threats. Work closely with Platform Engineering to embed scalable and pragmatic security guardrails into our infrastructure. OWN AND EVOLVE OUR SECURITY OPERATIONS CAPABILITIES Own and continuously improve our Datadog Cloud SIEM. Develop, tune, and maintain detection rules across cloud logs, identity systems, SaaS integrations, and security-relevant application logs. Improve signal quality by reducing noise and increasing risk-based, actionable alerting. Drive the integration of critical systems into the SIEM as part of vendor onboarding and annual control reviews. Improve alert routing, triage workflows, and response coordination across Slack and Jira. LEAD DETECTION ENGINEERING & MONITORING STRATEGY Translate threat scenarios and real-world attack paths into effective detection coverage. Continuously improve log ingestion strategies across GCP, Google Workspace, Wiz, Atlassian, Jumpcloud and other critical systems. Identify visibility gaps and close them pragmatically. Define and track detection coverage and maturity improvements over time. Lead security investigations and response enablement Investigate complex cloud and SaaS security events and incidents. Improve incident response playbooks, post-incident reviews, and learning loops. Contribute to reducing Mean Time to Detect (MTTD) and improving overall response effectiveness. About you - Proven experience (5+ years) in security engineering with deep hands-on expertise in cloud security and security operations. - Strong practical experience securing GCP environments, including IAM, Cloud Audit Logs, organisational policies, and network architecture. - Strong experience securing Kubernetes environments (RBAC, service accounts, Workload Identity, network policies, container risks). - Experience building and operating SIEM platforms (Datadog preferred; Splunk, Elastic or similar acceptable). You have built and tuned detection rules, improved signal-to-noise ratio, and increased detection quality. - Experience with Cloud Security Posture Management tools (Wiz prefer ... (truncated, view full listing at source)