Senior IT Security Engineer (d/f/m)

Senior IT Security Engineer

Every year millions of people are either filing their taxes in fear or giving up on their tax refund altogether. We're working on fixing that. Our intuitive app enables anyone, regardless of education or background, to file their taxes with newfound confidence.

Spread across Germany, Spain and the UK, the team at Taxfix Group with its brands Taxfix and Steuerbot, is a compassionate group of solution-finders. We speak our minds openly, and with over 400 professionals, including tax experts, developers, and IT security experts, we're rich in ideas and voices. The group has facilitated more than 3.5 billion euros in tax refunds for its customers since its founding in 2016.

Your Challenge

As our Senior IT Security Engineer, you won't just secure systems—you'll help shape a security culture that enables our teams to work with confidence, speed, and minimal friction. We're scaling rapidly across Germany, Spain, and the UK, and our 400+ employees need robust security that doesn't slow them down.

You'll report to our Director of IT and work alongside System Engineers, Software Engineers, and IT Support Administrators to implement pragmatic security controls across our entire corporate infrastructure. You'll be the hands-on driver of our internal IT security landscape—ensuring that every system, tool, and endpoint used by Taxfix teams is secure by design and resilient in the face of threats.

Whether you work remotely within Germany or from our modern Berlin office in our hybrid work model, you'll have the freedom to design and implement security solutions that scale with our growth. This isn't about creating roadblocks—it's about building security that enables our teams to work confidently and efficiently.

Your Responsibilities and Decisions

Implement, automate and maintain pragmatic, scalable security controls across our SaaS tooling, employee devices, IAM system, MDM solutions, AI tooling, and cloud infrastructure.

Lead incident response and management efforts, ensuring swift, effective resolution of security events impacting corporate IT operations.

Manage and optimise EDR, IAM, and device management solutions according to security best practices.

Continuously monitor, evaluate, and enhance security controls to adapt to evolving cyber threats and technological changes.

Implement and enforce IT security policies across the organisation, providing clear guidance to all departments.

Conduct light-weight penetration testing and threat analysis to identify vulnerabilities before they become problems.

Provide expert security guidance to stakeholders across Taxfix, translating complex security concepts into actionable recommendations.

Core Requirements

• 5+ years of security engineering experience in corporate IT or cloud security roles.
• Demonstrable experience securing public cloud environments (e.g., AWS, Azure, GCP).
• Deep understanding of cloud IAM policies, roles, and best practices for least-privilege access.
• Professional experience with penetration testing and threat analysis.
• Practical experience with vulnerability scanning tools (e.g., Tenable, Qualys, Nessus) and managing the lifecycle of identified vulnerabilities.
• Proficiency with infrastructure-as-code tooling (Terraform preferred) and CI/CD security practices.
• Proficiency in one or more scripting languages for automation, such as Python, Go, or Bash.
• Deep understanding of security frameworks and methodologies, including MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks.
• Familiarity with AI/LLM technologies for security applications.
• Fluent in English.

Nice to Have

• Previous experience in fintech or highly regulated environments.
• Network security, specifically Cisco Meraki.
• German speaking and writing skills.

Why Taxfix?

• A chance to do meaningful, people-centric work with an international team of passionate professionals.
• Holistic well-being with free mental health coaching sessions and yoga.
• A monthly allowance to spend on an extensive range of services that you can use and roll over as flexibly as you like.
• Employee stock options for all employees—because everyone deserves to benefit from the success they help to create.
• 30 annual vacation days and flexible working hours.
• Work from abroad for up to six weeks every year. Just align with your team, and then enjoy your trip.
• Plenty of opportunities to socialise as a team. In addition to internal tech meetups, our international team hosts regular get-togethers—virtually and in person when possible.
• Free tax declaration filing, of course, through the Taxfix app—and internal support for all personal tax-related questions.
• Have a four-legged friend in your life? We're happy to have dogs join us in the office.

Excited? So are we. Learn more about Team Taxfix on our blog and get a glimpse of our culture.

At Taxfix, we believe that incredible things happen when you have a wealth of perspectives and experiences. We're proudly committed to equal employment and development opportunities no matter your gender, race, religion, age, sexual orientation, colour, disability, or place of origin. To help mitigate any potential unconscious biases, we ask that you refrain from including your picture, age, or marital status on your CV. Let your experiences speak for themselves.

Not sure if you meet all the requirements for this role? Please apply anyway. You might bring something special to the team that we hadn't considered previously.