Analytical állások Németországban (információbiztonság)

• Continuously learn and adapt to new technologies, frameworks, and tools to enhance development capabilities.
• Participate in infrastructure automation projects and contribute to maintaining high standards of quality and documentation.

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

• Responsible for designing and implementing of OT network architectures for globally located production sites based on Purdue model and ISA/IEC 62443
• Configuration and integration of PLCs (Siemens / Rockwell) into industrial networks and SCADA systems for secure and reliable operation

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

What you'll do: Summary: To drive the development and deployment of Multi Cloud based solutions including Sovereign and Private Clouds setups we are looking for an enthusiastic Product Security Expert who will apply Cloud security expertise to identify, assess, evaluate and control security...

• Collaboration with the Sovereign Cloud RISO
• Own specific documentation requirements from compliance & security execution to satisfy specific newly mandated regulation like SecNumCloud, BSI-C5, VS-NfD

• Developing and refining IT resilience, backup and disaster recovery concepts on a group-wide level.
• Assessing existing backup, restore and recovery capabilities, including resilience against ransomware and large-scale failures.

Configure, maintain, administer and deploy a wide range of cyber security technologies such as IDS/IPS, EDR/XDR, SIEM, SOAR, Cloud vulnerability assessment, cloud-native security technologies (CSPM, CNAPP, CASB, CIEM, etc…)...

• Being part of our Infrastructure & Network Team in an international IT set-up ​
• Group-wide definition of standards for network technology
• Management of external service providers
• Establishment of security standards in collaboration with the Information Security Officer

You will align and drive application security across group IT–managed and internally developed applications, collaborating closely with interdisciplinary development teams to ensure a secure end‑to‑end lifecycle...

• Design, implement, and maintain SAP authorization concepts across S/4HANA PCE and related systems.
• Develop and manage user roles, profiles, and authorization objects in alignment with business needs and compliance requirements.

Taking responsibility: Platform Engineering & Governance: Design, implement, and maintain core Microsoft 365 services (Exchange Online, SharePoint, Teams, OneDrive); define and enforce governance policies that balance user productivity with enterprise control. Security & Identity...

• One of your responsibilities will be to protect Boehringer Ingelheim by performing standard and strategic operational and/or IT audits.
• Moreover, you will conduct process assessments by analyzing information and interviewing colleagues.

Your task will be to identify, analyze, and track threat actor TTPs and IOCs using prioritization frameworks and continuous monitoring of the threat landscape....