Senior SecOps Engineer (Libra, Legal AI Assistant)

Role overview

Join Libra as a Senior SecOps Engineer to design, automate, and operate security controls across products and infrastructure. You’ll secure traffic, identities, and data to enable fast and safe delivery through least-privilege access, strong encryption, and continuous monitoring.

Responsibilities

• Lead the design, automation, and operation of security controls across products and infrastructure, ensuring systems are robust, observable, and compliant.
• Own end-to-end security for internal and external traffic in cloud environments, including:
  • Network segmentation
  • mTLS
  • WAF
  • IDS/IPS
• Drive vulnerability and patch management.
• Integrate security into CI/CD pipelines and enforce secure-by-default guardrails.

Requirements

• Hands-on experience with secrets and key management (e.g., Vault, KMS/HSM) and encryption best practices.
• Deep knowledge of IAM/RBAC, SSO/SCIM, and least-privilege access design.
• Experience building and tuning SIEM/EDR and log pipelines, with strong detection engineering and incident response skills.
• Strong communication in English (German is a plus).
• Solid understanding of European data protection and security compliance (e.g., GDPR, ISO 27001 / SOC 2) and how to operationalize controls.
• Proficiency in network/perimeter security (TLS/mTLS, WAF, IDS/IPS, VPN/Zero Trust).
• Familiarity with vulnerability management and CI/CD security (e.g., SCA/SAST/DAST, container scanning) and system hardening (e.g., CIS benchmarks).
• Experience operating security controls in cloud environments, ideally Open Telekom Cloud (OTC) or OpenStack.

Nice-to-haves / strengths

• Entrepreneurial mindset, strong urgency, and ability to operate independently while aligning with team goals.
• German language skills.

Location / work mode

• Full remote, described as a hybrid Berlin-based collaboration with AI, Product, and Security teams.