Senior Security Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Design, implement, and consistently improve the security architecture for infrastructure, applications, and cloud environments.

• Perform threat modeling, security assessments, and architecture reviews.

• Strategize and conduct penetration tests, as well as define and supervise appropriate remediation strategies.

• Enhance endpoint protection and vulnerability management solutions.

• Develop and refine security monitoring capabilities, including SIEM.

• Safeguard cloud infrastructures using Microsoft Azure, Entra ID, and AWS, focusing on identity and access management and network security.

• Investigate, manage, and monitor security incidents, including conducting root-cause analyses.

• Automate security processes and incorporate security within CI/CD pipelines (Security as Code).

• Provide guidance and assistance to development and infrastructure teams.

• Participate in compliance and audit activities, such as ISO 27001, SOC 2, and GDPR.

• Leverage modern AI/LLM tools to enhance security processes and facilitate secure AI adoption.

⛳️ Requirements

• Several years of professional experience, ideally over 5 years, in IT security, information security, or security engineering.

• Strong proficiency in at least one of the following domains: cloud security, application security, network security, or security operations.

• Familiarity with security standards and frameworks such as OWASP, MITRE ATT&CK, NIST, or CIS Benchmarks.

• Practical experience with EDR solutions, preferably in conjunction with security monitoring and vulnerability management.

• Proficient in at least one scripting or programming language, such as Python, Go, or Bash.

• Analytical and solution-oriented mindset, with the capability to communicate technical risks clearly and effectively.

• Excellent command of English; proficiency in German is a plus.

• Ideally, experience with cloud platforms, containers (Docker/Kubernetes), Infrastructure as Code, or DevSecOps.

• Relevant security certifications such as CISSP, OSCP, CCSP, or Security+ are preferred.

🏝️ Benefits

• Flexible working hours and the ability to work remotely.

• 30 days of annual leave, plus additional time off on December 24 and 31.

• Bike leasing program.

• Mental health support program.

• Monthly employer-sponsored savings benefits following the probationary period.

• Opportunities for professional and personal development through customized training programs.

• Employee discounts.

• €50 monthly tax-free non-cash benefit voucher.