EU remote
Cyber Security Engineer (f/m/d) Infrastructure & AI Platform Security
About this role
About IONOS At IONOS, we don't just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe's leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools. What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises.
We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit. Ready for your next step? Become part of IONOS and grow with us. Both halves of this role are about the same underlying question: which systems can reach our most sensitive infrastructure, and under what controls. You will own the security architecture for our provider-side infrastructure layer, and you will be the subject matter expert for the AI platforms and agents we operate internally, making sure they run in a secure, governed, auditable state rather than accumulating quietly as a new class of privileged access.
This is a hands-on expert role. You set standards, pressure-test designs, and work directly with platform and engineering teams across our brands to get them implemented. Tasks Define and maintain security architecture standards and hardening baselines for provider-side infrastructure: virtualization and container platforms, control planes and provisioning systems, DNS, mail infrastructure, and backup and recovery systems.
Assess and strengthen tenant isolation across shared hosting, virtualization, and container layers, and drive remediation with the responsible platform teams. Review infrastructure designs and major changes for security impact, and act as an escalation point for infrastructure security questions from platform, cloud, and brand engineering teams. Reduce blast radius on the paths that matter most: privileged access to customer-facing infrastructure, administrative segmentation, secrets handling, and recovery integrity — translated into workable per-brand implementation plans across our heterogeneous platforms.