Platform Security Engineer

Every year millions of people are either filing their taxes in fear or giving up on their tax refund altogether. Our intuitive app enables anyone, regardless of education or background, to file their taxes with newfound confidence. Spread across Germany, Spain and the UK, the team at Taxfix Group with its brands Taxfix, Steuerbot and TaxScouts, is a compassionate group of solution-finders. We speak our minds openly, and with over 400 professionals, including tax experts, developers, and IT security experts, we're rich in ideas and voices. The group has facilitated more than 3.5 billion euros in tax refunds for its customers since its founding in 2016. We are seeking an experienced Senior Platform Security Engineer to design, implement, and maintain security solutions for our cloud-native infrastructure and AI systems. This role will be responsible for securing our platform across multiple cloud environments, ensuring container and Kubernetes security, protecting AI/ML workflows, and implementing robust security controls throughout our SDLC. The ideal candidate will have deep technical and programmatic expertise in cloud-native security, along with demonstrable hands‐on experience securing AI/ML systems. Cloud & Infrastructure Security Design and implement comprehensive security architectures for cloud platforms (AWS, Azure, GCP) Implement security best practices for container and Kubernetes deployments Design and deploy zero‐trust network architecture and secure service mesh solutions AI/ML Security Secure AI‐powered product features end to end, covering context assembly, tool invocation, and output handling Design and review security controls for RAG implementations Secure agentic solutions and their extension points: tool integrations (MCP clients and servers), agent skills, and autonomous action boundaries such as scoped credentials, sandboxing, and human‐in‐the‐loop gates Establish data security controls for sensitive data flowing through inference, retrieval, and fine‐tuning Security Operations Lead incident response for cloud and AI infrastructure security incidents Develop and implement security monitoring and detection strategies Conduct threat modeling and risk assessments for cloud‐native and AI systems Perform regular security assessments of cloud infrastructure and container deployments Leadership & Collaboration Collaborate with development, data science, and operations teams to integrate security Stay current with emerging threats and security trends in cloud‐native and AI security Experience 5+ years of experience in information security, with at least 3 years specializing in cloud security 3+ years of hands‐on experience securing containerized environments (Docker, Kubernetes) Strong background in at least one major cloud provider (AWS, Azure, GCP) Technical Skills Expert knowledge of container security, Kubernetes security, and cloud‐native security patterns Proficiency with Infrastructure as Code tools (Terraform, CloudFormation, etc.) Strong understanding of network security, identity management, and access control Experience with security tooling for cloud environments (Cloud Security Posture Management, CSPM) Working knowledge of AI/ML and LLM security, including familiarity with frameworks like TensorFlow and PyTorch and their security implications Proficiency in scripting and programming languages (Python, Go, Bash) Contributions to open‐source security projects or public security research 30 annual vacation days and flexible

working hours
. Free tax declaration filing, of course, through the Taxfix app—and internal support for all personal tax‐related questions. We're happy to have dogs join us in the office.