Technical állások Németországban (információbiztonság)

• Acting as a permanent member of the Cybersecurity Incident Response Team (CIRT)
• Executing and supporting technical incident response activities, including analysis, containment, and recovery
• Escalating critical technical findings and risks to the Incident Commander

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

What You'll Do: We are seeking a skilled Cyber Detection Engineer to join our team and work on cutting-edge cloud and container security projects. This role offers the opportunity to develop and implement strategies to detect anomalous or malicious behavior in Public Cloud environments such as AWS,...

• Continuously learn and adapt to new technologies, frameworks, and tools to enhance development capabilities.
• Participate in infrastructure automation projects and contribute to maintaining high standards of quality and documentation.

• J-SOX Compliance and Auditing:
• Provide support and facilitation for the annual self-assessment process, adhering strictly to J-SOX guidelines.
• Assist in the establishment and coordination of an international IT controls framework.
• Contribute to the automation of J-SOX controls.

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

• Definition and operational responsibility for the implementation of the Secure Development Lifecycle of our measurement technology products
• Conducting and reviewing security risk management, including threat modeling and code reviews, throughout the entire product lifecycle

• Driving business development and sales growth within OT Cybersecurity
• Developing and executing the go-to-market strategy
• Building and managing relationships with system integrators, partners and key accounts

Design and Own End-to-End Solutions: Lead the architectural design and implementation of full-stack features, from robust backend services to intuitive internal dashboards....

• Conduct digital forensic investigations in the context of information security incidents, ensuring thorough and accurate analysis.
• Collect, preserve, and document forensic evidence in accordance with industry standards and legal requirements.

Configure, maintain, administer and deploy a wide range of cyber security technologies such as IDS/IPS, EDR/XDR, SIEM, SOAR, Cloud vulnerability assessment, cloud-native security technologies (CSPM, CNAPP, CASB, CIEM, etc…)...

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks

• Support, invest in and develop an incredible team of talented engineers with clear expectations via practices such as 1:1s, goal setting, and constant feedback.
• Recruit, manage, and retain the best talent for the delivery teams.

• Participate in risk analysis, threat modeling and security engineering sessions
• Contribute to the design, review, and testing of secure components
• Support the planning and coordination of penetration tests with the Testing team

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

Apply your knowledge of security architecture to help software engineers build secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions....

• Conceptualization, development, and practical validation of innovative automated and AI-supported solutions to enhance documentation and analysis workflows
• Analysis of technical and regulatory requirements and translation into robust, technically feasible concepts

• Developing and refining IT resilience, backup and disaster recovery concepts on a group-wide level.
• Assessing existing backup, restore and recovery capabilities, including resilience against ransomware and large-scale failures.

• Monitor security events and investigate alerts to identify potential threats.
• Handle IT security incidents following established procedures and escalate when necessary.
• Operate SOC tools and collaborate with the external MSSP for SIEM alert management.