About PPRO
PPRO provides a local payments platform that connects global payment providers with billions of consumers worldwide. Its team spans more than 50 nationalities across over 10 global locations.
Задачи
•Conduct threat modeling and security assessments across cloud environments and technology stacks
•Partner with Engineering teams to integrate security principles, practices, and tools throughout the software development lifecycle
•Design and build reusable Security as Code artefacts and patterns
•Write hardening standards and security guidelines for technologies and processes
•Own and maintain the Cloud Native Application Protection Platform
•Develop automations for auditing, cloud security posture management, and other security processes
•Maintain and expand IaC codebases and CI/CD pipelines
•Promote AI use to streamline security operations, scale defensive capabilities, and help non-security teams adopt security-first practices
•Provide technical advice on compliance matters
•Monitor emerging security trends and technologies to drive improvements
Требования
•Solid knowledge of computer networks and operating systems
•Strong AWS background and understanding of security hotspots, best practices, and security services
•Knowledge of container security best practices, including Kubernetes security
•Deep understanding of DevSecOps and CI/CD security controls
•Hands-on experience with Infrastructure as Code, preferably Terraform; CI/CD pipelines, preferably GitHub Actions; and scripting with Python and Bash
•Actively use modern AI/LLM frameworks to accelerate workflows and build scalable security solutions
•Results-oriented, collaborative, pragmatic, proactive, and committed to continuous improvement
•Strong interpersonal and communication skills; able to unblock teams and foster security awareness
•Excellent written and spoken English
Будет плюсом
•Knowledge of the Wiz platform
•Cloud incident or threat response experience
•GCP experience
•Cloud penetration testing or offensive security assessment experience
•Familiarity with the Mitre ATT&CK framework
•SIEM experience
Условия
•Hybrid work with an expectation of 3 days per week on site
•Work from abroad for up to 30 days per year
•30 Days of annual holiday
•€1,000 Annual learning and development budget
•Accident, disability, direct (bAV), and travel insurance
•Gym membership contribution
•Enhanced family leave
•Mental health platform with therapy, courses, and guided meditations
•Pet-friendly office
