Senior Platform Engineer (d/f/m)

their tax refund altogether. We're working on fixing that. Our intuitive app enables anyone, regardless of education or background, to file their taxes with newfound confidence.Spread across Germany, Spain and the UK, the team at Taxfix Group with its brands Taxfix, Steuerbot and TaxScouts, is a compassionate group of solution-finders. We speak our minds openly, and with over 400 professionals, including tax experts, developers, and IT security experts, we're rich in ideas and voices. The group has facilitated more than 3.5 billion euros in tax refunds for its customers since its founding in 2016.Your challenge:We are seeking an experienced Senior Platform Security Engineer to design, implement, and maintain security solutions for our cloud-native infrastructure and AI systems. This role will be responsible for securing our platform across multiple cloud environments, ensuring container and Kubernetes security, protecting AI/ML workflows, and implementing robust security controls throughout our SDLC. The ideal candidate will have deep technical and programmatic expertise in cloud-native security, along with demonstrable hands-on experience securing AI/ML systems. Your responsibilities and decisions:Cloud & Infrastructure SecurityDesign and implement comprehensive security architectures for cloud platforms (AWS, Azure, GCP)Implement security best practices for container and Kubernetes deploymentsDevelop and maintain secure Infrastructure as Code (IaC) codebasesDesign and deploy zero-trust network architecture and secure service mesh solutionsBuild and maintain secure CI/CD pipelines following DevSecOps principlesAI/ML SecuritySecure AI-powered product features end to end, covering context assembly, tool invocation, and output handlingDesign and review security controls for RAG implementationsSecure agentic solutions and their extension points: tool integrations (MCP clients and servers), agent skills, and autonomous action boundaries such as scoped credentials, sandboxing, and human-in-the-loop gatesBuild defenses against direct and indirect prompt injection and other adversarial inputs to LLM applicationsEstablish data security controls for sensitive data flowing through inference, retrieval, and fine-tuningSecurity OperationsLead incident response for cloud and AI infrastructure security incidentsDevelop and implement security monitoring and detection strategiesConduct threat modeling and risk assessments for cloud-native and AI systemsPerform regular security assessments of cloud infrastructure and container deploymentsCreate and maintain security documentation, including policies, procedures, and run-booksLeadership & CollaborationCollaborate with development, data science, and operations teams to integrate securityCommunicate security requirements and recommendations to technical and non-technical stakeholdersStay current with emerging threats and security trends in cloud-native and AI securityParticipate in technology selections for security tooling and platformsYour profile: Experience5+ years of experience in information security, with at least 3 years specializing in cloud security3+ years of hands-on experience securing containerized environments (Docker, Kubernetes)Demonstrable hands-on experience securing AI/ML or LLM-based systemsStrong background in at least one major cloud provider (AWS, Azure, GCP)Technical SkillsExpert knowledge of container security, Kubernetes security, and cloud-native security patternsProficiency with Infrastructure as Code tools (Terraform, CloudFormation, etc.)Strong understanding of network security, identity management, and access controlExperience with security tooling for cloud environments (Cloud Security Posture Management, CSPM)Working knowledge of AI/ML and LLM security, including familiarity with frameworks like TensorFlow and PyTorch and their security implicationsProficiency in scripting and programming languages (Python, Go, Bash)Experience with security automation and orchestrationPreferred ExperienceDeep experience securing Large Language Models (LLMs) and generative AI systemsFamiliarity with AI/LLM security frameworks (e.g., OWASP LLM Top 10) and AI governance or compliance requirementsExperience with secure multi-tenant AI infrastructureExperience with privacy-enhancing technologies for AI/ML (differential privacy, federated learning)Contributions to open-source security projects or public security researchExperience building security tools or automation frameworksWhy Taxfix?A chance to do meaningful, people-centric work with an international team of passionate professionals.Holistic well-being with free mental health coaching sessions and yoga.A monthly allowance to spend on an extensive range of services that you can use and roll over as flexibly as you like.Employee stock options for all employees—because everyone deserves to benefit from the success they help to create.30 annual vacation days and flexible working hours.Work from abroad for up to six weeks every year. Just align with your team, and then enjoy your trip.Plenty of opportunities to socialise as a team. In addition to internal tech meetups, our international team hosts regular get-togethers—virtually and in person when possible.Free tax declaration filing, of course, through the Taxfix app—and internal support for all personal tax-related questions.Have a four-legged friend in your life? We’re happy to have dogs join us in the office.Excited? So are we. Learn more about Team Taxfix on our blog and get a glimpse of our culture.  At Taxfix, we believe that incredible things happen when you have a wealth of perspectives and experiences. We're proudly committed to equal employment and development opportunities no matter your gender, race, religion, age, sexual orientation, colour, disability, or place of origin. To help mitigate any potential unconscious biases, we ask that you refrain from including your picture, age, or marital status on your CV. Let your experiences speak for themselves. Not sure if you meet all the requirements for this role? Please apply anyway. You might bring something special to the team that we hadn't considered previously.