Cyber Security Engineer – Infrastructure & AI Platform Security

IONOS

. Define and maintain security architecture standards and hardening baselines for provider-side infrastructure: virtualization and container platforms, control planes and provisioning systems, DNS, mail infrastructure, and backup and recovery systems .

Posted 11/11/2026full-timeBucharest • RomaniaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and maintaining security architecture standards, particularly for multi-tenant infrastructure and internal AI platforms. Proficient in identity and access management, risk assessment, and implementing security measures across diverse environments.

Highest-signal resume keywords

Infrastructure SecurityIdentity And Access ManagementLinux ProficiencyAI Platform SecurityRisk-Based Decision Making

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitecturePrivileged Access ManagementSecrets ManagementInfrastructure-As-Code SecurityContainer SecurityVirtualization SecurityNetworking SecurityData Access RulesIncident ManagementSecurity Standards Enforcement

Soft Skills

Technical CommunicationStakeholder EngagementDecision Making

Tools & Technologies

AI PlatformsAgent FrameworksControl PlanesProvisioning SystemsBackup And Recovery Systems

Certifications & Qualifications

NIS2 / BSIG FamiliarityISO 27001 Familiarity

Industry Keywords

Multi-Tenant EnvironmentHosting ProviderCloud ProviderTelcoLegacy Systems

Tech Stack

Tools & technologies

CloudDNSLinux

About the role

Key responsibilities & impact

Define and maintain security architecture standards and hardening baselines for provider-side infrastructure: virtualization and container platforms, control planes and provisioning systems, DNS, mail infrastructure, and backup and recovery systems
Assess and strengthen tenant isolation across shared hosting, virtualization, and container layers, and drive remediation with responsible platform teams
Review infrastructure designs and major changes for security impact, and act as an escalation point for infrastructure security questions from platform, cloud, and brand engineering teams
Reduce blast radius on privileged access to customer-facing infrastructure, administrative segmentation, secrets handling, and recovery integrity through per-brand implementation plans
Support Cyber Defense, Vulnerability Management, and IT Emergency Management during incidents and post-incident hardening
Own security architecture and baseline standards for internal AI platforms, including model gateways, self-hosted models, agent frameworks, assistant integrations, connectors, and retrieval pipelines
Define and enforce agent identification, authentication, authorization, non-human identity handling, credential and token management, least-privilege access, and human-in-the-loop controls
Establish data access and indexing rules for internal AI systems and ensure activity is logged, attributable, and reviewable
Run pre-deployment security reviews for internal AI platforms and agent use cases and monitor unsanctioned AI usage
Advise security functions and internal engineering teams on safe AI adoption and defensible guardrails

Requirements

What you’ll need

Several years of hands-on experience in infrastructure or platform security, ideally at a hosting provider, cloud provider, telco, or comparably large-scale multi-tenant environment
Deep practical knowledge of Linux, virtualization and container platforms, networking, and the security properties of multi-tenant infrastructure
Strong background in identity and access: privileged access, machine and workload identity, secrets management, authorization models, and infrastructure-as-code security
Experience designing and enforcing security standards in a heterogeneous, partly legacy landscape, and getting them adopted by teams you do not manage
Working knowledge of how LLM and agent systems are built and operated, and of risks specific to them: prompt injection through untrusted data, over-scoped tool access, data exposure via retrieval, unlogged autonomous action, model and provider dependency
Ability to make and defend risk-based decisions, including blocking a deployment with a clear rationale, and to explain technical risk to non-technical stakeholders
Fluent English; German is a strong advantage given our regulatory and public-sector environment
Hands-on experience deploying or securing internal AI platforms, agent frameworks, or tool-calling integrations in production
Familiarity with NIS2 / BSIG or ISO 27001
Background in DNS, e-mail infrastructure, or abuse-adjacent platform security
Experience in a multi-brand or post-acquisition environment where the same control has to land in several different implementations
Security engineering or development background (automation, tooling, scripting)

Benefits

Comp & perks

Access to local/international trainings, development and growth opportunities, including access to e-learning platforms, covering both technical and soft skills areas
Modern technologies, product responsibility
Flexible work schedule
Hybrid work (3 days a week in office)
Medical services package from one of two private providers
25 vacation days per year
Substitute days off for public holidays that occur on the weekend
Meal tickets
Internal referral program
Team events, networking events organized to promote a passionate, creative and diverse culture
Summerfest and Winterfest parties
Coffee, soft drinks and fresh fruits in the office