[Hiring] Security Engineer @Noxtua

Role Description

At Noxtua, we're building Europe's Legal AI, and legal professionals trust us with some of their most confidential work. Security is part of what we deliver, not an add-on: we are certified to BSI C5, TISAX and ISO 27001. As our Security Engineer, you'll join the Tech team and set the security standard for our cloud infrastructure, our AI workloads and our product.

You'll work closely with our DevOps team, our development and AI teams, and our Information Security Officer, and you'll be the person they turn to when something needs to be secure.

Qualifications

• 4+ years of experience in security engineering, cloud security or DevSecOps.
• In-depth knowledge of cloud and infrastructure security, including IAM, secrets management, network segmentation, and Linux hardening, ideally on AWS.
• Experience with Open Telekom Cloud or other European clouds is a plus.
• Ability to build security into delivery with CI/CD security checks, dependency and container scanning, and vulnerability management.
• Proficient in reading Terraform and Python.
• Experience handling security incidents from detection to post-mortem.
• Familiarity with penetration test findings.
• Experience in a certified environment with knowledge of ISO/IEC 27001 controls; experience with BSI C5, TISAX, or internal audits is a plus.
• Interest in LLM and AI security.
• Fluent in English and German.
• Based in Germany.

Requirements

• Secure our infrastructure: set and enforce the security baseline for our cloud, GPU servers and services, including IAM, secrets and network controls, together with the DevOps team.
• Find and fix vulnerabilities: run vulnerability scanning, coordinate external penetration tests, and track findings to closure with the teams that own them.
• Build security into delivery: add security checks to our GitLab CI/CD pipelines, and review designs and code with the development and AI teams, including the risks specific to LLM applications.
• Respond to incidents: lead the technical response to security incidents, from detection and containment to the post-mortem and the fix.
• Keep us audit-ready: implement and evidence the technical controls for ISO 27001, BSI C5 and TISAX, and answer the security questions of customers and partners.
• Deputise for our Information Security Officer: stand in for the ISO, support internal audits, and help train colleagues on information security.

Benefits

• 100% remote work possible (given a German residence), other countries upon request.
• Flexible working hours.
• 26 days vacation + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days).
• Discounts: e.g., Urban Sports Club Membership, depending on location.
• Equipment: Laptop (Lenovo or Mac), plus a home office setup budget (paid with your first salary).

Company Description

Noxtua is Europe's Legal AI built for legal professionals in law firms, legal departments, public administration, and the judiciary. Its AI covers the full workflow of legal text work: research, analysis of complex legal issues, and document drafting.

Noxtua is built to meet the professional, criminal, and data protection requirements specific to the legal profession — including Section 203 of the German Criminal Code and Section 43e of the Federal Code for Lawyers — and holds certifications including BSI C5, ISO 27001, and ISO 42001.

Founded in 2017 in Berlin on research by Dr. Leif-Nissen Lundbæk and Professor Dr. Michael Huth at Oxford University and Imperial College London, the company has offices in Paris, Berlin, Stockholm, Zagreb, Munich and Fribourg.

We explicitly encourage women to apply, as they are currently underrepresented. Our goal is to build a diverse and inclusive work environment that values different perspectives. Of course, we welcome applications from all qualified individuals – regardless of gender, ethnic origin, religion, disability, age, or sexual identity.