Senior IT Security Engineer – Security Architecture, Operations

This is a fully remote position, open to applicants in Germany.

📋 Description

• Enhance and refine monitoring and alerting systems.

• Evaluate security alerts and detect potential threats at an early stage.

• Lead the incident response activities in case of security breaches.

• Coordinate appropriate actions with both internal and external stakeholders.

• Manage and improve existing security solutions.

• Independently assess and implement new security technologies without vendor dependence.

• Strategically evolve the security tool ecosystem and security architecture for networks, endpoints, server infrastructure, and cloud environments.

• Review security processes and implement effective automation.

• Evaluate the benefits of AI-driven solutions.

• Collaborate with IT operations, network, cloud, and infrastructure teams, along with data protection, compliance, and external service providers.

• Prepare documentation of technical risks and proposed solutions for various audiences.

• Document technical security measures comprehensively.

• Assist in preparing evidence, audits, and reports regarding the security posture.

⛳️ Requirements

• Extensive practical experience in IT security.

• Proficiency in security monitoring and incident management.

• Familiarity with SIEM, EDR/XDR, or NDR technologies.

• Experience in network, endpoint, and identity security.

• Knowledge of on-premises and cloud security.

• Capability to evaluate, enhance, and apply security architectures effectively.

• Experience in assessing, implementing, or further developing security solutions.

• Understanding of Zero Trust principles, network segmentation, and vulnerability and patch management.

• Knowledge of standards such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, or NIS2.

• Proficient in German at a C1 level.

• Good command of English at a B2 level.

• Ability to articulate technical risks and confidently advocate professional positions to diverse stakeholders.

• Familiarity with Cisco or Microsoft-based security solutions is an advantage.

• Relevant certifications such as CISSP, CISM, or GIAC are beneficial.

🏝️ Benefits

• Flexible working hours based on trust.

• Opportunities for sabbaticals.

• 30 days of annual paid leave.

• Option to acquire an additional 20 flexible leave days.

• Training, knowledge-sharing days, and Exploration Days.

• Peer feedback initiatives.

• Customized development programs.

• Independent, results-driven work environment without micromanagement or traditional hierarchies.

• Subsidies for fitness and the Deutschlandticket.

• Company health insurance coverage.

• Meal subsidies.

• Company bicycle leasing options.