Security Engineer

We are looking for a mid to senior Security Engineer to join our Infrastructure & Security department. The main focus of the team is to ensure Avafin's products and teams have the least downtime possible. To accomplish this, the team is responsible for building and maintaining the IT infrastructure and workflows both on-prem and in the cloud for all teams, reliably deploy and operate our production services and products, manage services used at Avafin and ensure the organisation complies with applicable security standards and regulations. As technologies we use DefectDojo, OpenVAS​, Terraform, AWS, Kubernetes, Helm, ArgoCD, Github/Gitub Actions,​ Microsoft365, Entra, Go, Python and more.​

Our IT Department, which is based in Wiener Neustadt, is part of an international Fintech company which provides short and long-term consumer loans in 5 countries within and outside of Europe. With our own platform and websites, we provide an entirely digital lending process so we can guarantee a cashflow to the consumer within only a couple of minutes.​

Location: Austria, Poland, Latvia, Spain, EU

What we expect from you?

• At least 5 years of experience working in a Cloud Security position with focus in AWS

• Extensive hands-on experience with AWS security services (IAM, GuardDuty, Security Hub, Inspector, CloudTrail...)

• Strong background in IAM and least-privilege design

• Hands-on experience implementing Infrastructure as Code

• Strong understanding of network security concepts

• Experience with container and Kubernetes security (EKS, ECS, Docker hardening...)

• Proven track record in incident response, threat detection, and forensic investigations in AWS environments

• Fluency in English (communication with an international team)

What will you do?

• Lead IAM strategy and improvements in AWS

• Ensure secure, compliant, and resilient cloud infrastructure operations

• Strengthen overall security posture through standards, risk assessments, and controls

• Automate security processes, integrations, and daily operational tasks

• Monitor, detect, and respond to cloud security threats and incidents

What we offer?

• Remote work - up to 100% remote, or hybrid, if possible, up to you

• Flexible working hours - only need to cover core working hours with the team

• 34 hours working week - have more time for you and your hobbies at a competitive full time salary

• License courses, workshops and learning opportunities within a badge system