{"id":2959683,"url":"https://alion.io/job/godutch-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":695448,"name":"GoDutch","domain":"godutch.com","url":"https://alion.io/company/godutch","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":123000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":20},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Camel","optional":false},{"name":"Apache Kafka","optional":false},{"name":"ArgoCD","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitOps","optional":false},{"name":"Google BigQuery","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Quarkus","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"Django","optional":true},{"name":"PCI DSS","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-20T19:16:23Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T08:27:27Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the job\nGoDutch is looking for a Cloud Security Engineer (GCP) to become the first dedicated security engineer in its Engineering team, based in Amsterdam.\nGoDutch is a Dutch fintech platform used by more than 15,000 SMEs and growing fast. Business accounts, cards, invoicing, bookkeeping and payments sit in one app.\nThe engineering team is rapidly growing, senior and close to the product. You will work directly with the CPTO, the Head of Engineering and the Chief Compliance & Risk Officer. Your work is visible from day one: you set the security baseline that the new platform and every future engineer will build on.\nWhat you will do, in short\nIn a financial institution, security is not only about protecting systems. It is about earning customer trust, meeting DORA and supervisory expectations, and keeping money movements correct. You will own GoDutch's cloud security posture end to end, turn written policy into working controls, and steer the specialist partners who operate parts of the stack today.\nWhat you will do\nAs the security subject matter expert for GoDutch's engineering teams, this could mean:\nCloud and platform security\nOwn the security posture of GoDutch's Google Cloud organisation: IAM, org policies, VPC Service Controls, KMS and secrets, logging and cloud posture management.\n\nHarden the Kubernetes environment that hosts the banking platform, including workload isolation and least-privilege access between services.\n\nSecure the event and orchestration layer (Kafka, Temporal, Apache Camel) and the data platform (BigQuery), including encryption, access and data residency.\n\nReview and advise on the security of system designs, partner integrations and APIs (core banking, card processing, payments, KYC/KYB).\n\nBuild and maintain security dashboards that give management and the board a clear view of cloud assets and posture.\n\nSecure delivery (DevSecOps)\nWork with engineering and the platform partner to embed security gates into CI/CD and GitOps (Argo CD): SAST, dependency and container scanning, IaC policy checks, secrets detection.\n\nEstablish secure development guidelines for Java/Quarkus and TypeScript services, and support teams in adopting them.\n\nRun threat modelling for new features and integrations that move money or handle customer data.\n\nDetection, response and resilience\nConfigure and tune threat detection, alerting and response playbooks across cloud workloads, observability and endpoints.\n\nParticipate in incident response, including security investigation and input for DORA major-incident classification and reporting.\n\nContribute security scenarios to business continuity and disaster recovery testing.\n\nCoordinate penetration tests and, where in scope, threat-led testing; track findings to closure.\n\nGovernance, risk and compliance\nTurn GoDutch's information security policies and standards into implemented, evidenced controls, against CIS Controls, ISO 27001 and DORA.\n\nMaintain the ICT asset register and vulnerability management process, and feed the GRC platform with control evidence.\n\nAssess the ICT security of third-party providers and support the Register of Information and contract requirements under DORA.\n\nPrepare evidence and answers for regulators, auditors and partner due diligence\n\nCoordinate with GoDutch's managed service providers and external security partner, holding them to agreed scope and quality.\n\nAwareness and continuous improvement\nRun security training and awareness for engineering and the wider company.\n\nTrack security metrics and report on posture improvements to the CPTO and management.\n\nStay current with emerging threats and recommend tools and practices that fit a lean team.\n\nOur tech stack\nJava/Quarkus, TypeScript, Python/Django, Google Cloud Platform (GCP), Kubernetes, Kafka, Temporal, Apache Camel, Argo CD.\nSecurity tooling covers cloud posture management, enterprise EDR, centralised logging and observability, zero-trust network access and a central identity provider, run together with specialist partners. Details are shared during the interview process.\nWhat you need to succeed\nGoDutch is looking for someone who is passionate about security, combines hands-on technical depth with clear communication, and is comfortable being the first security engineer in a growing team. Furthermore, GoDutch requires:\nProven experience in cloud security (typically 5+ years in security or platform engineering).\n\nExpert knowledge of cloud security: IAM, org policies, network perimeter controls, KMS, centralised logging.\n\nHands-on experience with cloud security posture management (CSPM/CNAPP) tooling.\n\nExperience securing Kubernetes workloads and Infrastructure as Code.\n\nKnowledge of threat detection, vulnerability management and incident response, with SIEM/EDR tooling.\n\nExperience embedding security into CI/CD pipelines.\n\nWorking knowledge of regulatory and control frameworks relevant to financial services: DORA, ISO 27001, CIS Controls, GDPR.\n\nExperience working with, and holding to account, managed service providers or external security partners.\n\nStrong communication skills, and the ability to explain security risk to engineers, management and supervisors alike.\n\nFluent English; eligible to work in the Netherlands.\n\nNice to have\nSecurity certifications (e.g. CISSP, CCSP, Google Professional Cloud Security Engineer, GIAC).\n\nExperience at a licensed payment institution, EMI or bank, ideally under DNB or ECB supervision.\n\nExperience with DORA ICT risk management, third-party risk or threat-led penetration testing (TIBER/TLPT).\n\nFamiliarity with card (PCI DSS) and payments security, including SEPA and PSD2 strong customer authentication.\n\nExperience with event-driven architectures (Kafka, Temporal) and securing service-to-service communication.\n\nExperience with zero-trust access and identity platforms.\n\nExperience with a GRC platform and automated control evidence.\n\nKnowledge of secure coding and application security testing (SAST/DAST) for Java and TypeScript\n\nWhy join GoDutch as a Cloud Security Engineer?\nYou will be the first dedicated security engineer, setting the security architecture of a challenger finance platform rather than inheriting one.\n\nYou will protect the money and administration of thousand of users.\n\nYou will work with a modern cloud-native stack and have real influence over which security tools and practices are adopted.\n\nYou will work directly with the CPTO, engineering leadership and compliance, with short decision lines.\n\nYou will help GoDutch scale securely in a competitive market, and can grow the security function with it as the team expands.\n\nAmsterdam office on the Rokin, with a hybrid way of working","description_format":"text","description_chars":6682,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-10-20T22:33:42Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:2","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/godutch-cloud-security-engineer","json_url":"https://alion.io/job/godutch-cloud-security-engineer.json","meta":{"generated_at":"2026-10-21T12:10:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17309,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695448},"rest":"https://alion.io/mcp/rest/get_company?id=695448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgodutch-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgodutch-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgodutch-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/godutch-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgodutch-cloud-security-engineer"}]}