Senior IT Security Engineer

Quick Facts

• Role: Senior IT Security Engineer

• Focus areas: Security Operations, Security Architecture, Incident Response

Description

You will develop and operate security solutions across a modern technology network, connecting Security Operations, Security Architecture, and Incident Response. The role emphasizes improving monitoring and alerting, handling incidents, and evolving the security tool landscape for network, endpoints, server infrastructure, and cloud environments.

Responsibilities

• Improve monitoring and alerting processes, analyze security alerts, identify potential threats, and ensure timely response.

• Run the incident-response process, coordinate actions with internal and external responsible parties, and further develop runbooks for emergencies.

• Operate and optimize existing security solutions; evaluate new technologies vendor-independently and support their introduction into production.

• Strategically evolve the security tool landscape and shape security architecture for network, endpoints, servers, and cloud environments.

• Analyze security processes, identify automation opportunities, implement modern technologies, and evaluate the added value of AI-based solutions.

• Collaborate with IT operations, network, cloud, and infrastructure teams, data protection, compliance, and external service providers; communicate technical risks and solution proposals.

• Document security measures and support evidence gathering for audits, reporting, and security posture assessments.

Requirements

• Years of practical experience in IT security, including operational, technical implementation, and conceptual work.

• Experience with security monitoring, incident handling, and modern security technologies (SIEM, EDR/XDR, NDR) plus network, endpoint, and identity security.

• Ability to assess, develop, and implement security architectures for modern IT landscapes (on-prem and cloud).

• Experience evaluating and implementing security solutions; ability to ramp up quickly on new technologies (Cisco- or Microsoft-based security solutions are advantageous).

• Knowledge of Zero Trust, network segmentation, vulnerability and patch management, and standards/frameworks such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, and NIS-2.

• German (C1) and English (B2) proficiency.

• Ability to clearly explain technical risks and confidently represent technical positions to IT teams, business areas, management, and stakeholders.

• CISSP, CISM, or GIAC certifications are a plus; practical experience and willingness to keep developing are essential.