IT Security Engineer – Cloud

Digistore24 USA

IT Security Engineer managing cloud security and risk management for Digistore24. Protecting systems and ensuring compliance within a remote and diverse team environment.

Posted 5/26/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Protect our systems and cloud environments: Continuously analyze security risks, implement modern security standards, and ensure the protection of our cloud infrastructure and critical business systems.
Establish clear security policies and processes: Develop and refine security policies, standardize security procedures, and drive their adoption across the organization.
Drive security awareness and training initiatives: Strengthen security awareness company-wide through training sessions, workshops, and proactive communication with all teams.
Ensure structured incident and risk management: Detect security incidents early, coordinate incident response, prepare analyses, and continuously improve our incident response procedures.
Ensure compliance with standards and regulations (PCI, ISO, NIS2): Support the company in meeting external compliance requirements, prepare for audits, and guide business units through compliance processes.
Monitor our core security mechanisms: Analyze security-critical components, support monitoring and audit activities, and ensure transparency for security-relevant events.
Collaborate closely with Product, IT, and Engineering teams: Assist other teams in designing secure solutions, reducing risks, simplifying security processes, and contributing to a secure, scalable overall architecture.
Ensure a secure software development lifecycle: Expand our secure development lifecycle (SSDLC), advise teams on security-related topics, and ensure security reviews are an integral part of our processes.

Requirements

What you’ll need

Proactively identify security risks and think in terms of practical solutions.
Strong understanding of interactions between software, infrastructure, and cloud systems.
A passion for assessing the security of systems, services, and processes.
Nice-to-have: Experience with compliance standards such as ISO 27001, PCI DSS, or NIS2.
Nice-to-have: Experience with security testing (e.g., SAST, DAST, vulnerability scanning).
Understanding of secure development and infrastructure processes (SSDLC, Cloud Security, IAM, Risk Management).
Strong analytical skills for evaluating security incidents and vulnerabilities.
Excellent communication skills – able to explain technical risks clearly and understandably.
Basic knowledge of cloud environments (GCP/AWS) and automated workflows (e.g., CI/CD).
Nice-to-have: Experience with security tools and standards such as SIEM, SSO/MFA, audits, and security policies.

Benefits

Comp & perks

Work from our partner coworking spaces (up to 3 days per week) or from your home office, provided you can guarantee stable internet access.
Regular professional development and training.
The stability of a highly successful German high-tech company funded by its product, not investors.
Outcome-focused teams and a culture of direct feedback.
Modern equipment: MacBook provided.
International, collaborative team with strong cohesion.
Memorable team events in various European countries.
Autonomy from day one.
A team culture with first-name basis, no dress code, and mutual respect.
Flexible working hours, Monday to Friday.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security risk analysissecurity policies developmentincident responserisk managementsecure software development lifecycle (SSDLC)security testingvulnerability scanningcloud securityidentity and access management (IAM)compliance standards

Soft Skills

analytical skillscommunication skillsproactive problem solvingcollaborationtraining and awarenessprocess standardizationtechnical explanationadaptabilityteam supportinitiative

Certifications

ISO 27001PCI DSSNIS2