Senior IT Security Architect (Cloud Operations)

Quick Facts

• Role: Senior IT Security Architect (Cloud Operations)

• Focus: Security architecture and security operations combining monitoring, incident response, and process improvement

• Work model: Permanent full-time; location options including remote (Berlin, Lübeck, or nationwide remote)

Description

In this role, you connect Security Operations, Security Architecture, and Incident Response, with room to influence the selection and further development of security technologies. You enhance monitoring and alerting processes, lead incident response, and operate and optimize security solutions across network, endpoint, server infrastructure, and cloud environments.

Responsibilities

• Improve monitoring and alerting processes; analyze security alerts and proactively identify threats

• Lead incident response: coordinate appropriate actions with internal and external stakeholders and further develop emergency processes

• Operate and optimize existing security solutions; evaluate new technologies vendor-independently by security, benefit, and effort

• Drive strategic evolution of the security tool landscape and actively shape future security architecture for network, end devices, servers, and cloud

• Identify automation opportunities in security processes and assess added value of AI-based solutions

• Collaborate with IT operations, network, cloud, infrastructure, data protection, compliance, and external service providers; present technical risks and solutions to different audiences

• Document security measures and support evidence, audits, and reporting on the current security posture

Requirements

• Longstanding practical IT security experience, especially in operational tasks, technical implementation, and conceptual work

• Experience with security monitoring, incident handling, and modern security technologies such as SIEM, EDR/XDR, or NDR, plus network, endpoint, and identity security

• Understanding of security requirements for modern IT environments; experience with on-premise and cloud security and with assessing, extending, and implementing security architectures

• Experience assessing, implementing, or improving security solutions; willingness to learn new technologies (Cisco- or Microsoft-based security experience is a plus)

• Familiarity with Zero Trust, network segmentation, vulnerability and patch management, and standards such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, or NIS-2

• Very good German (C1) and good English (B2)

• Ability to explain technical risks clearly and represent your technical position confidently

• Plus: CISSP, CISM, or GIAC certifications (practical experience and willingness to continuously develop are especially important)

Benefits

• Trust-based working hours; flexible vacation planning with 30 vacation days plus up to 20 flex days; sabbaticals

• Training, knowledge days, exploration days, peer feedback, and individual development programs

• Additional benefits: fitness subsidies and Deutschlandticket, company health insurance, meal subsidy, Jobrad