Junior it állások Németországban (információbiztonság)

A Cyber Security Analyst protects an organization's computer networks, systems, and data from cyber threats by monitoring for breaches, investigating incidents, and implementing security measures like firewalls and encryption. They act as the first line of defense, utilizing SIEM systems to...

• Enforce Conditional Access and MFA policies in production environments
• Monitor policy implementation success and flag enforcement inconsistencies
• Run and maintain internal scripts or tooling used to apply and validate tenant configurations

Develop and drive the implementation of Cloud Data Security strategy in alignment with the Product Manager, Tech Lead, and Engineering Manager....

As a security leader, you will: (a) lead by example, innovate and solve security challenges at a massive scale, (b) set measurable goals for delivery by your team, (c) orchestrate strategy and direction, roadmap planning, and project execution scheduling, (d) hire, build and manage a...

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices

• Set up test systems (hardware / virtualized) in complex network structures so that they are ready to perform test cases
• Set up and run tests in line with test specifications and take appropriate actions (i.e. passing the test, raising a defect)

• Manage and support Microsoft Entra ID (Azure Active Directory) including user lifecycle, conditional access policies, MFA, identity protection, and application integrations.
• Administer and optimize Microsoft Intune for device management (Windows, iOS), compliance policies, and application deployment.

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

Analysis: you will support our partners in innovative projects and develop customized technological concepts that make our processes easier and more efficient....

Function as part of the second line of defense, reporting to the Deputy CISO and collaborating closely with first line teams on ICT risk and compliance topics....

• Design, implement, and maintain secure, scalable, and resilient production and non-production environments on AWS.
• Build and manage CI/CD pipelines with integrated security checks (SAST, DAST, dependency scanning).
• Automate security controls, governance processes, and compliance validation.

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

• Collaborate with a global team and work with colleagues from diverse cultures to gain broad perspectives and insights
• Learn cutting‑edge technologies with in‑depth knowledge of Microsoft Entra ID and how it strengthens organizational security

Incident Response & Monitoring: Participate in on-call rotation for security incidents, manage EDR/SIEM detection rules, and conduct threat/APT monitoring, hunting, and simulation to detect and mitigate malicious activity....

• Collaborate with group entities on continuous improvement of operational resilience measures
• Conduct ICT risk assessments and evaluation
• Support further development of the group ICT Control framework and monitor entities adherence
• Be a trusted advisor for resilient AI implementation

Lead the Security Organization: Oversee and mentor the members of Security Operations, Cloud Security, Product Security, and Security Engineering. Build a cohesive, high-performing security culture across teams. Define a company-wide security vision and roadmap. Align goals, KPIs, and initiatives...

• Developing and refining IT resilience, backup and disaster recovery concepts on a group-wide level.
• Assessing existing backup, restore and recovery capabilities, including resilience against ransomware and large-scale failures.