Security Engineer F/M

Tomorrow Jobs is recruiting for its client, an international financial technology company developing secure, cloud-native platforms for critical financial market infrastructure, a:

Security Engineer F/M – LUXEMBOURG – FREELANCE

Contract: 6-month freelance mission, renewable

Location: Luxembourg

You will join an international Technology team working at the intersection of financial services, cybersecurity and distributed ledger technology. The company develops a platform supporting secure and efficient collateral mobility for major financial institutions, operating in a highly demanding environment where security, cryptography, resilience, confidentiality and regulatory compliance are critical.

As a Security Engineer, you will contribute to strengthening and continuously improving the security posture of the company's platform, infrastructure and internal IT environments.

Your responsibilities will include:

• Designing and implementing secure architectures, security standards and technical controls across applications, infrastructure and software development environments.
• Maintaining and improving security controls across cloud services, networks, endpoints, containers and identity systems.
• Managing vulnerabilities, security patching, configuration hardening, control testing and security monitoring.
• Designing and maintaining cryptographic services, including key management, certificates, secrets, encryption and digital signatures.
• Contributing to the security and lifecycle management of Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).
• Supporting incident response, technical investigations, digital forensics and root-cause analysis.
• Developing and maintaining security procedures, incident response playbooks and continuous improvement initiatives.
• Translating technical risks, regulatory requirements and business needs into practical security controls.
• Supporting security audits, compliance activities and the implementation of security policies and standards, including SOC 2 requirements.
• Collaborating closely with engineering, DevOps, operations and business stakeholders to integrate security into development and operational processes.
• Contributing to the evolution of cryptographic practices, including cryptographic agility and post-quantum cryptography readiness.

Technical environment: Cybersecurity engineering, security architecture, cloud security, Linux / macOS, network security, identity and access management, application security, DevSecOps, vulnerability management, Kubernetes, containers, cryptography, PKI, key and secrets management, HSMs, encryption, digital signatures, incident response, digital forensics and security governance.

• Master's degree in Computer Science, Information Security, Cybersecurity or a related technical field.
• At least 5 years of professional experience in Security Engineering or a comparable cybersecurity role.
• Proven experience designing, implementing and operating enterprise security controls across cloud, networks, infrastructure, identity, applications, endpoints and containerized environments.
• Strong expertise in cryptography, PKI, key and secrets management, vulnerability management and security hardening.
• Good understanding of incident response, digital forensics, security monitoring, governance and compliance.
• Experience integrating security into software development and infrastructure operations, including DevSecOps practices.
• Relevant security certifications such as CISSP, CISM, CCSP, GIAC or equivalent would be an advantage.
• Strong analytical and problem-solving skills, with a hands-on, pragmatic and autonomous approach.
• Ability to collaborate effectively with technical and non-technical stakeholders while balancing security, operational and business priorities.
• Fluent written and spoken English.

Nice to have: experience with blockchain, Distributed Ledger Technology (DLT) or digital asset platforms; experience in regulated financial services or financial market infrastructure; hands-on experience with HSMs; knowledge of post-quantum cryptography and cryptographic migration strategies; experience supporting security audits, certifications or regulatory reviews; familiarity with cloud-native architectures, Kubernetes and modern DevSecOps toolchains.

Mission: 6 months, renewable

Location: Luxembourg

Contract: Freelance