Secure Software Development Specialist in Cloud – Bucharest

Job Title: Secure Software Development Specialist in Cloud

Corporate Title: AVP

Department: Chief Security Office (‘CSO’)

Location: Bucharest (BEX)

About us:

Deutsche Bank has a major business and technology program to adopt public cloud services, including a ten-year partnership with Google. The CSO security team established a Cloud Security Enablement program to embed security into its cloud environments and integrate into its overall range of information security capabilities.

To better support application development teams to adopt to cloud we enhanced our secure software development team and aim to build a strong focus on Cloud Security Software Engineering and specializes in providing guidance in Cloud security.

We are looking for an Information Security Specialist in Cloud Security and Software Development to analyze and specify how to secure applications in the Google Cloud Platform, and to help the Bank application development team in adopting public cloud.

You'll need to have a blend of security, software engineering, and cloud skills, and a passion bring your knowledge to the wider organisation.

Role:

This role is enabling the application development teams to secure the cloud applications through security knowledge and tools (native and third party) and driving security awareness to the beginning of the software development process. The responsibility is to drive the technical integration of security features in the development stack and to provide guidance on how to secure applications during the software development phase. With DB’s journey to the cloud, this has become increasingly important.

Your key areas:

• Know about the policy-as-code techniques and understand how security controls can be enforced at both build and run time and understand the composition of policies, security tools (third party and cloud-native), and processes embedded in the CI/CD pipeline.
• Improve our Secure Development Standard (Coding and API standards) and best practices regarding the need for cloud-based engineering and drive updates and promotion through training and drop in sessions.
• Collaborate with DB’s engineers' community and application development team to provide guidance and understand their needs for further improvements.
• Understanding the cloud services provided to our developers.
• Act as an internal expert in the cloud security features and advise other teams on options for improving and maintaining security.
• Constantly learn and research security testing technologies especially features provided by cloud providers.

Skills You’ll need:

• Degree-level IT and/or information security qualification or equivalent experience in Information Security and IT Security
• General understanding of current security industry standards, best practices, and/or frameworks i.e.: NIST, ISO27001, OWASP top 10
• Experience in Software Development and public cloud technologies
• Exposure to current development techniques such as agile, CI/CD pipelines, Terraform
• Experience using VCS (GitHub and or GitLab)
• Understanding of an international matrix-management organization and working with lead engineers, control, and technical solution owners

Skills That Will Help You:

• Creative mind, and a keen ability and initiative to think "beyond”

• Great team player and excellent communication skills
• Passionate about Information Security and Cloud Security Engineering
• Self-driven behavior
• Self-starter

Our values define the working environment we strive to create – diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.

We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.

Visit Inside Deutsche Bank to discover more about the culture of Deutsche Bank including Diversity, Equity & Inclusion, Leadership, Learning, Future of Work and more besides.