🛠 Tech Stack

💼 About This Role

You'll define the multi-quarter strategy for application and cloud security at Upvest, a fintech powering investment APIs for Europe's leading platforms. Your core impact is making security the easy path for every engineer by building paved roads and embedding security into the SDLC. This role offers the opportunity to scale security engineering in a fast-growing, well-funded company backed by BlackRock and Tencent.

🎯 What You'll Do

• Set multi-quarter strategy for application and cloud security across the Investment API platform.
• Lead, mentor, and grow the security engineering team and security culture.
• Own end-to-end application security including threat modeling and SAST/DAST/SCA integration.
• Drive cloud security posture in GCP with IAM, network controls, and Terraform baselines.
• Collaborate with product and engineering to embed security in every design.

📋 Requirements

• 6-10 years in security engineering with 4+ years in product or cloud security.
• Hands-on experience with cloud-native security (GCP preferred; AWS/Azure transferable).
• Strong foundations in application security including OWASP Top 10 and code review.
• Ability to lead through influence and partner effectively with engineering teams.

✨ Nice to Have

• Experience securing multi-tenant B2B platforms or financial-API products.
• Experience with DORA, MiFID II, or BaFin regulations.

🎁 Benefits & Perks

• 🏖️ Flexible working hours with hybrid model in Berlin.
• 📈 Equity in a fast-growing fintech backed by top investors.
• 🧑‍💻 Learning budget for conferences and courses.
• 🏥 Private health insurance and pension plan.
• 🍽️ Daily lunch and snacks in the office.

📨 Hiring Process

Estimated timeline: 3-5 weeks · AI estimate

1. 1Recruiter Screening· 30 min
2. 2Hiring Manager Interview· 60 min
3. 3Technical Interview· 90 min
4. 4Executive Interview· 45 min