Junior software developer állások Németországban (információbiztonság)

You support the implementation and maintenance of Business Continuity Management (BCM) and Operational Resilience across Allane Mobility Group...

• Enforce Conditional Access and MFA policies in production environments
• Monitor policy implementation success and flag enforcement inconsistencies
• Run and maintain internal scripts or tooling used to apply and validate tenant configurations

• System Ownership & Lifecycle:
• Own the entire system life cycle
• for our public cloud-based infrastructure, including requirements gathering, architecting, vetting, building, and operational management.
• Automation & Operational Efficiency: Drive significant improvements in
• operational efficiency

Taking responsibility: Platform Engineering & Governance: Design, implement, and maintain core Microsoft 365 services (Exchange Online, SharePoint, Teams, OneDrive); define and enforce governance policies that balance user productivity with enterprise control. Security & Identity...

Your task will be to identify, analyze, and track threat actor TTPs and IOCs using prioritization frameworks and continuous monitoring of the threat landscape....

Responsibility for all information security issues within the institution and with regard to third parties....

• Design our software, analyze problems and implement your solutions independently focusing on C++ development and network protocols
• Develop complex software modules together with our agile development teams

• Implement security controls and tools for application security testing (SAST, DAST, IAST)
• Perform vulnerability assessments and penetration testing on applications
• Collaborate with developers to remediate security issues and enforce secure coding practices

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

Function as part of the second line of defense, reporting to the Deputy CISO and collaborating closely with first line teams on ICT risk and compliance topics....

• Design, implement, and maintain secure, scalable, and resilient production and non-production environments on AWS.
• Build and manage CI/CD pipelines with integrated security checks (SAST, DAST, dependency scanning).
• Automate security controls, governance processes, and compliance validation.

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

• Collaborate with a global team and work with colleagues from diverse cultures to gain broad perspectives and insights
• Learn cutting‑edge technologies with in‑depth knowledge of Microsoft Entra ID and how it strengthens organizational security

• Collaborate with group entities on continuous improvement of operational resilience measures
• Conduct ICT risk assessments and evaluation
• Support further development of the group ICT Control framework and monitor entities adherence
• Be a trusted advisor for resilient AI implementation

• Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents
• Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations

• Design and implement security architecture for our Internal Developer Platform
• Drive adoption of Zero Trust principles across platform components, networks, identities, and services

• Act as NIS2 Integration Expert, bridging the German KRITIS team with other EU member states' critical infrastructure teams.
• Manage Cross-Border Integration of security protocols, processes, and controls in accordance with NIS2.

• Translate Hotel's business needs into requirements for security solutions
• Lead and support security projects, contribute to Business and IT Projects in collaboration with Hotels division
• Define remediation plans and lead implementation to close audit findings for Liebherr Hotels