Cybersecurity Consultant & Security Engineer

Quick Facts

• Role: Cybersecurity Consultant & Security Engineer

• Focus: Security measures for IT networks and end-to-end application security

Description

You will plan, implement, and maintain cybersecurity measures for IT systems and networks, including assessing security vulnerabilities and supporting incident-related actions.

You’ll drive end-to-end application security across the software lifecycle using security platforms and tools, and help train Security Champions in development (OWASP SAMM).

In addition, you’ll consult internal teams on technical and organizational security controls aligned with relevant standards and regulations.

Responsibilities

• Plan, implement, and maintain security measures in IT systems and networks

• Evaluate relevant security vulnerabilities, define solutions and policies, and act during security incidents

• Implement end-to-end application security across the software value chain (build, deliver, and maintain)

• Train and support security champions in software development per OWASP SAMM

• Contribute to concepts, proposals, policies, risk analyses, processes, templates, and guidelines from a security perspective

• Advise and support teams on technical and organizational cyber security measures aligned to ISO/IEC 27001, NIS2, CRA, and related requirements

• Exchange knowledge and further develop cyber security with local and international peers

Requirements

• Completed degree in Cybersecurity/IT security or comparable qualifications/experience

• Minimum 5 years of cybersecurity experience

• Practical knowledge of BSI standards and BSI IT-Grundschutz

• Hands-on application of SAST, SCA, and IAST

• Familiarity with security tools such as Falcon (or similar), ideally including Arnica and Sysdig

• Experience with Kubernetes and CI/CD pipelines

• Multi-year application development experience; comfort working with microservice architectures

• Solid knowledge of regulatory requirements (ISO/IEC 27000 / BSI §8a, NIS2, CRA, BSI, B3S)

• Experience advising and implementing technical and organizational security measures

• Security-process know-how, SOC concepts, and securing OT/IoT systems

• Strong communication skills with management and business teams; English proficiency in speech and writing

Benefits

• Hybrid and flexible working arrangements

• Secure job in a stable industry within an international group

• Tailored further training opportunities

• 30 days of vacation plus special leave

• Monthly tax-free benefits via SWARCO Card

• Employer support for company pension plans and savings benefits

• Health and fitness offers (e-bike leasing) and external advice for professional, private, or health topics