Sounds about right? Then let’s talk!
Apply nowBerlin
Cloud Security Engineer
We are a mobile game company, based in both Helsinki and Berlin, creating world-class entertainment by building a portfolio of hit games. Since our launch in 2020, our first chart-topping game Merge Mansion has been entertaining over 55 million players worldwide, and we have grown into a team of over 200.
Our mission is to entertain hundreds of millions of people for decades, with our games, and also through our creative marketing, community, and beyond – while having fun with it.
We’re ordinary people crafting extraordinary games with passion and ambition, united by our culture of trust, psychological safety and wellbeing.
We are looking for a solution-oriented Cloud Security Engineer to help us integrate security-minded thinking into every aspect of our game development cycle. Joining our InfoSec team, you will take on the responsibility of securing our cloud infrastructure, application development, and security tooling, while also supporting our game teams with security-related matters. You will play a key role in building our blameless security culture by championing honesty, solution-oriented thinking, collaboration, and a strong sense of responsibility, so we can openly and constructively address security concerns.
More about Metacore crafts: https://metacoregames.com/our-crafts
Responsibilities
- Developing, implementing, and maintaining cloud security architecture, policies, and procedures
- Collaborating with game and infrastructure teams to identify, evaluate, and mitigate security risks, integrating security into our development lifecycle
- Developing and further improving the security of cloud infrastructure, emphasizing automated, reusable, and architecturally sound solutions
- Fostering open communication, collaboration, and a culture where voicing concerns contributes to swift and effective threat response
Requirements
- Extensive work history in Cloud Security, Application Security, or DevSecOps roles
- Hands-on experience on securing production workloads in Amazon Web Services (AWS)
- Knowledge of security and infrastructure automation tools such as Terraform and CloudFormation
- Strong understanding of security controls, privacy considerations, and risk management
- Proven capability to support Infrastructure and Game teams with related security inquiries related to infrastructure, development, and application deployment process
- Solution-oriented mindset with a focus on automation and architectural security
- Ability secure platforms, and information across the organization, and take ownership of this responsibility
In addition to these, it would be nice but not mandatory for you to have these as well:
- Familiarity with mobile application development, application and API security, and CI/CD pipelines (Github Actions, ArgoCD)
- Experience of conducting threat modeling in cloud native environment and application development
- Practical know-how of Kubernetes (EKS) or other serverless and container technologies
- Demonstrated ability in security incident investigation and response in cloud environments
What We Offer
- Workplace where we aim high, without taking ourselves too seriously
- Autonomy and accountability with support to foster professional development
- Great opportunities to grow with the company
- Work-life balance and strong emphasis on wellbeing
- Approachable leaders with low ego
- Flexible hybrid workplace where people enjoy working at the office
Basics
- Location: Helsinki, Finland or Berlin, Germany
- Relocation: Relocating to Finland or Germany expected, full support provided
- Work model: Mix of office and remote work
- Working language: English