Senior IT Security Engineer – Security Architecture, Operations

• Further develop monitoring and alerting processes
• Analyze security alerts and identify potential threats at an early stage
• Lead incident response processes and initiate appropriate measures
• Further develop incident response procedures
• Operate and optimize existing security solutions
• Evaluate new security technologies independently of vendors with regard to security, benefits, and effort required
• Support the integration of new technologies into ongoing operations
• Strategically develop the security tool landscape and security architecture for networks, endpoints, server infrastructure, and cloud environments
• Analyze security processes and identify automation opportunities
• Use modern technologies and assess the added value of AI-based solutions
• Collaborate with IT operations, network, cloud and infrastructure teams, data protection, compliance, and external service providers
• Present technical risks and proposed solutions clearly to different target groups
• Document technical security measures
• Support the preparation of evidence, audits, and reports on the current security posture

• Several years of practical experience in IT security
• Experience with security monitoring, incident handling, and modern security technologies such as SIEM, EDR/XDR, or NDR
• Experience with network, endpoint, and identity security
• Experience with on-premises and cloud security
• Ability to assess and further develop security architectures and put them into practice
• Experience evaluating, implementing, or further developing security solutions
• Familiarity with Zero Trust, network segmentation, vulnerability and patch management
• Familiarity with ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, or NIS2
• Very good German language skills at C1 level
• Good English language skills at B2 level
• Ability to explain technical risks clearly and confidently represent professional positions
• Experience with Cisco- or Microsoft-based security solutions is desirable
• Certifications such as CISSP, CISM, or GIAC are a plus

• Trust-based working hours
• Sabbaticals
• 30 days of paid annual leave
• Option to add 20 flexible days off to your annual leave
• Training sessions, knowledge days, exploration days, peer feedback, and individual development programs
• Independent, results-oriented work without micromanagement or traditional hierarchies
• Freedom to grow and support each other’s development
• Fitness and Deutschlandticket subsidies
• Company health insurance
• Meal allowance
• Company bike leasing program