Join our team as a Security Engineer and be part of the cutting‐edge IT innovations at our client Hubs, a leading multinational bank.You will be working according to modern delivery practices (Agile, Scrum, Continuous Delivery) within complex and security‐critical IT environments.As part of the Proximity Hosting Solutions team, you will contribute to the design, automation, hardening, and operation of a secure, high‐performance platform used by multiple DevOps teams and Financial Markets applications.The Proximity Hosting Solutions team is responsible for managing and securing the IT infrastructure hosted in Equinix Data Centres in Frankfurt and managed by Getronics. As a Security Engineer, your focus is to embed security into every layer of the delivery and operational lifecycle, ensuring resilient, compliant, high‐quality infrastructure and platforms for the business.Business as Usual & License to OperateMonitor and respond to security alerts (SIEM, EDR, IDS/IPS) in private cloud/on-prem environmentsInvestigate incidents, perform root cause analysis (RCA), and implement remediationManage identity and access controls (Active Directory, RBAC, MFA, PAM)Conduct vulnerability assessments and track remediation across servers and applicationsIntegrate security controls into CI/CD pipelines (DevSecOps practices)Implement and maintain security policies, standards, and hardening guidelinesPerform patching, compliance checks, and internal security auditsCollaborate with infrastructure, DevOps, and application teamsMaintain security documentation and support change/release processesRansomware resilience programs, Darktrace operationalization, SIEM/SOC integrationZero Trust and segmentation projectsDevOps teams within our client, use Scrum and Continuous Delivery Engineering Practices. This means we develop, secure, automate, test, deploy, monitor, and decommission systems in an integrated way. In this role, you directly influence our client's operational reliability and security posture. You will collaborate closely with enthusiastic, highly skilled colleagues from our client Hubs in Romania and Amsterdam. You will work on externally hosted (private cloud) infrastructure environments for Financial Markets — a fast-paced, complex, and continuously evolving area where quality and resilience are critical.Hybrid work is part of the role: a mix of focused remote work and collaborative in‐office sessions.You will stay up to date with the latest Security tooling, infrastructure trends, cloud security practices, and regulatory requirements.You are a skilled, analytical, and security‐focused Security Engineer. You understand infrastructure, automation, and security engineering. You also fully support our client's risk and security processes — since security is part of our DNA.As a Security Engineer, you need:Experience with infrastructure hardening, patching, configuration management, and complianceExperience securing (data centre) infrastructure, containers, and workloadsHands-on with vulnerability management, pentesting processes, remediation, and security monitoringFamiliarity with identity & access controls, PAM, secrets managementExperience with monitoring, alerting and logging systemsExperience working in complex, highly regulated IT environmentsScripting skills (Python, Bash, PowerShell or similar) are a strong advantageSecurity tools: SIEM (Splunk, QRadar, ELK), EDR solutionsIdentity & Access Management: Active Directory, RBAC, PAM, MFANetwork security fundamentals (firewalls, IDS/IPS, VPN, segmentation)Vulnerability tools: Nessus / QualysOS security: Windows/Linux hardening and patch managementExperience with VRRP, GLBP, HSRP or similar first-hop redundancy protocolsExperience performing risk/security procedures (pentesting support, vulnerability remediation, compliance reporting, PAM, DR)Darktrace rollout and network security enhancementsKnowledge of networking security (firewalls, routing, segmentation)Experience designing secure data center or hybrid architecturesMonitoring & observability stack: Zabbix, Grafana, Loki, Prometheus, Alertmanager, AlloyContainer security (Docker, Kubernetes)IaC: Ansible, TerraformSecurity certifications (e.G., CISSP, CISM, Security+, CCSP, CEH)