DB Global Technology
DB Global Technology is Deutsche Bank’s technology center in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.
We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.
Integrated within Deutsche Bank’s Chief Security Office (CSO), the Cloud Cyber Hygiene function is responsible for maintaining and continuously improving the security posture of the Bank’s cloud environments. The team focuses on proactive risk reduction through strong security baselines, configuration assurance, workload protection, and continuous visibility across cloud assets.
As an Cloud Cyber Hygiene Specialist, you will act as a senior subject‑matter expert for cloud security hygiene with a primary focus on Google Cloud Platform (GCP). You will help shape and drive the cloud hygiene strategy by leveraging Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) capabilities to reduce attack surface, manage exposure, and ensure consistent security standards across cloud workloads.
This role combines hands‑on technical expertise with ownership and influence, requiring close collaboration with Cloud Security Architecture, Engineering, and Platform teams to embed secure-by-design principles and continuously improve cloud security maturity at scale.
Responsibilities
- Act as a senior contributor and subject‑matter expert for cloud cyber hygiene and cloud workload security, primarily within GCP.
- Own and drive the continuous improvement of cloud hygiene practices, including secure configuration management, identity hygiene, network exposure reduction, logging standards, and workload security controls.
- Lead the implementation, operation, and optimization of CWPP capabilities, including vulnerability management, image scanning, runtime visibility, and workload posture across cloud-native environments.
- Operate and enhance CSPM and exposure management tooling, ensuring security findings are accurate, risk‑ranked, and aligned to business priorities.
- Utilize and integrate enterprise security tooling such as Prisma, Tanium, and Brinqa to improve cloud asset visibility, vulnerability hygiene, risk aggregation, and remediation tracking.
- Proactively identify systemic weaknesses and recurring hygiene issues across cloud platforms, translating findings into scalable remediation guidance and preventative controls.
- Partner with Cloud Security Architecture and Engineering teams to embed secure-by-default guardrails and hygiene controls into cloud platforms and deployment pipelines.
- Define, document, and maintain cloud hygiene standards, processes, and metrics to support consistent adoption across teams and environments.
- Take accountability for assigned initiatives, providing technical leadership and mentoring to junior team members, and contributing to the overall maturity of cloud security operations.
Well-being & Benefits
Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.
- Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
- A professional, passionate, and fun workplace.
- A modern office with fun and relaxing areas to boost creativity.
- Continuous learning culture with coaching and support from team experts.
- A culture where you can openly speak about mental health.
Physically thriving: We support you managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-up's.
Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.
- 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).
- Hybrid working model with flexible working options
- Enjoy retailer discounts, cultural and CSR activities, workshops, and more.
Financially secure: We support you to meet personal financial goals during your active career and for the future.
- Competitive income, performance-based promotions, and a sense of purpose.
- Meal vouchers, bonuses for referrals
Interested in more: discover what our employees value in the Well-being & Benefits hub!
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.
Skills
- 5+ years of hands-on experience in public cloud environments, with strong expertise in Google Cloud Platform (GCP); AWS or Azure experience is a plus.
- Proven experience in cloud cyber hygiene, posture management, or workload security, operating in complex enterprise environments.
- Strong practical experience with CWPP technologies, including vulnerability management, container and VM security, image scanning, and workload visibility.
- Experience working with CSPM and exposure management platforms, translating findings into actionable remediation and long‑term hygiene improvements.
- Hands-on experience with enterprise security tooling such as Prisma, Tanium, and Brinqa, or equivalent platforms for cloud security, vulnerability hygiene, and risk aggregation.
- Solid understanding of core cloud security domains:
- IAM, network security, logging and monitoring, encryption and key management, and workload/platform security.
- Ability to assess risk, prioritize hygiene improvements, and influence engineering teams to drive sustainable remediation.
- Experience automating or streamlining hygiene and security processes using scripting or tooling (e.g. GCP CLI, Python, PowerShell, Go).
- Strong documentation and communication skills, with the ability to translate security requirements into clear, practical guidance for technical teams.
