Cloud Security Engineer

h3bAbout the job /b /h3 pbGoDutch is looking for a Cloud Security Engineer (GCP) to become the first dedicated security engineer in its Engineering team, based in Amsterdam. /b /p pbGoDutch is a Dutch fintech platform used by more than 15,000 SMEs and growing fast. Business accounts, cards, invoicing, bookkeeping and payments sit in one app. /b /p pbThe engineering team is rapidly growing, senior and close to the product. You will work directly with the CPTO, the Head of Engineering and the Chief Compliance Risk Officer. Your work is visible from day one: you set the security baseline that the new platform and every future engineer will build on. /b /p h3bWhat you will do, in short /b /h3 pbIn a financial institution, security is not only about protecting systems. It is about earning customer trust, meeting DORA and supervisory expectations, and keeping money movements correct. You will own GoDutch's cloud security posture end to end, turn written policy into working controls, and steer the specialist partners who operate parts of the stack today. /b /p h3bWhat you will do /b /h3 pbAs the security subject matter expert for GoDutch's engineering teams, this could mean: /b /p h3bCloud and platform security /b /h3 ul lipbOwn the security posture of GoDutch's Google Cloud organisation: IAM, org policies, VPC Service Controls, KMS and secrets, logging and cloud posture management. /b /p /li lipbHarden the Kubernetes environment that hosts the banking platform, including workload isolation and least-privilege access between services. /b /p /li lipbSecure the event and orchestration layer (Kafka, Temporal, Apache Camel) and the data platform (BigQuery), including encryption, access and data residency. /b /p /li lipbReview and advise on the security of system designs, partner integrations and APIs (core banking, card processing, payments, KYC/KYB). /b /p /li lipbBuild and maintain security dashboards that give management and the board a clear view of cloud assets and posture. /b /p /li /ul h3bSecure delivery (DevSecOps) /b /h3 ul lipbWork with engineering and the platform partner to embed security gates into CI/CD and GitOps (Argo CD): SAST, dependency and container scanning, IaC policy checks, secrets detection. /b /p /li lipbEstablish secure development guidelines for Java/Quarkus and TypeScript services, and support teams in adopting them. /b /p /li lipbRun threat modelling for new features and integrations that move money or handle customer data. /b /p /li /ul h3bDetection, response and resilience /b /h3 ul lipbConfigure and tune threat detection, alerting and response playbooks across cloud workloads, observability and endpoints. /b /p /li lipbParticipate in incident response, including security investigation and input for DORA major-incident classification and reporting. /b /p /li lipbContribute security scenarios to business continuity and disaster recovery testing. /b /p /li lipbCoordinate penetration tests and, where in scope, threat-led testing; track findings to closure. /b /p /li /ul h3bGovernance, risk and compliance /b /h3 ul lipbTurn GoDutch's information security policies and standards into implemented, evidenced controls, against CIS Controls, ISO 27001 and DORA. /b /p /li lipbMaintain the ICT asset register and vulnerability management process, and feed the GRC platform with control evidence. /b /p /li lipbAssess the ICT security of third-party providers and support the Register of Information and contract requirements under DORA. /b /p /li lipbPrepare evidence and answers for regulators, auditors and partner due diligence /b /p /li lipbCoordinate with GoDutch's managed service providers and external security partner, holding them to agreed scope and quality. /b /p /li /ul h3bAwareness and continuous improvement /b /h3 ul lipbRun security training and awareness for engineering and the wider company. /b /p /li lipbTrack security metrics and report on posture improvements to the CPTO and management. /b /p /li lipbStay current with emerging threats and recommend tools and practices that fit a lean team. /b /p /li /ul h3bOur tech stack /b /h3 pbJava/Quarkus, TypeScript, Python/Django, Google Cloud Platform (GCP), Kubernetes, Kafka, Temporal, Apache Camel, Argo CD. /b /p pbSecurity tooling covers cloud posture management, enterprise EDR, centralised logging and observability, zero-trust network access and a central identity provider, run together with specialist partners. Details are shared during the interview process. /b /p h3bWhat you need to succeed /b /h3 pbGoDutch is looking for someone who is passionate about security, combines hands-on technical depth with clear communication, and is comfortable being the first security engineer in a growing team. Furthermore, GoDutch requires: /b /p ul lipbProven experience in cloud security (typically 5+ years in security or platform engineering). /b /p /li lipbExpert knowledge of cloud security: IAM, org policies, network perimeter controls, KMS, centrali