Senior Security Engineer

Lunar is a Nordic challenger bank building the future of financial life with AI at the core. Our engineers, designers, and product

people work on problems that actually matter. Making money simpler, smarter, and more rewarding for a million of registered users

across the Nordics.

As a Senior Security Engineer, you will be part of Squad Gravity, our dedicated security team based in Aarhus. You will own and

drive security across a broad surface; including cloud and endpoint protection, enabling secure use of AI solutions, incident

response, compliance, and detection engineering. You won't just advise from the sidelines. You will be hands-on, building the

defences, responding to real threats, and shaping the security posture of a Nordic fintech going to the moon. Squad Gravity is

part of the innovation, not the typical "department of no" that you see in other organisations. Our mission statement is “Building

Trust at Scale through Frictionless Security”. As such, your goal is to enable secure innovation and fast pace with smart use of

AI and modern cloud technology.

Squad Gravity is responsible for security operations, compliance, and resilience at Lunar. The scope is wide, and you will

contribute across several areas:

• AI & Automation: Help us understand and address the security implications and explore how AI can make our own security work

smarter.

• Security Findings & Remediation: Assess and remediate security findings across AWS, Kubernetes, and employee endpoints -

spanning critical vulnerabilities such as React2Shell to RBAC privilege escalation vulnerabilities.

• Compliance & Policy: Contribute to gap analysis of regulation or compliance frameworks such as DORA, GDPR, AI Act, ISO27001 and

similar.

• Penetration Testing: Coordinate external penetration tests, communicate findings to stakeholders, and drive remediation of

results.

You are someone who thrives in a role where no two weeks look the same. You are equally comfortable digging into a Kubernetes RBAC

vulnerability as you are drafting an encryption policy or investigating a phishing campaign. You take ownership, communicate

clearly, and know when to go deep versus when to move fast.

We know this is a broad role and we don't expect you to be an expert in everything from day one. What matters is that you are

strong in some of these areas and genuinely curious to grow in the others. As such, if you are a strong DevSecOps/SRE/Platform

Engineer profile, with an interest in Security and Security Engineering, don't hesitate to apply.

• Cloud Engineering and Security: Hands-on experience with AWS and Kubernetes. You should be comfortable using technologies like

Terraform for AWS and GitOps for Kubernetes. Furthermore, you should be well-versed in designing secure cloud-native

applications using modern best practices.

• AI Readiness: You don't need to be an AI engineer, but you have experience with Claude Code and working with agentic solutions.

You understand how these AI tools work and how they change the security landscape.

• Identity & Access Management: Experience with SAML, OIDC and similar protocols and technologies in a corporate environment.

Experience with RBAC, least privilege access models, and identity management in cloud environments.

• Communication & Soft Skills: You can explain security concepts to both engineers and non-technical stakeholders. You have

strong soft skills and know how to influence others effectively without being seen as the typical "security gatekeeper".

• Experience: 3+ years in Security Engineering, DevSecOps, SRE, Platform Engineering, or a similar role, ideally in a tech-driven

or regulated environment.

• 4 days in the office. We're a team that builds together, thinks together, and moves together. Showing up is part of how we

work.

• A well-equipped workspace. You’ll have a modern computer and a comfortable desk setup. We want you to have the tools you need

to do your best work.

• Pension, health insurance, and enhanced parental leave. From your financial future to your family moments. We've got you

covered.

While you hold on tight for us to get back to you, curious to see what we’re up to? Follow us on LinkedIn for business

announcements and releases 📢, check out our Instagram for an inside scoop on what it’s like to work here .

Depending on the regulations in the country where you will be employed, we will ask to see or obtain information about your

criminal record. Please note that our employment is conditional upon you not being registered in RKI (Ribers Kredit Information).

We welcome applications from candidates of all backgrounds. If you need any adjustments during the recruitment process, please let

us know