IT Security & Resilience Engineer

Quick Facts

• Role: IT Security & Resilience Engineer
• Focus: Technical Exposure & Vulnerability Management in an international enterprise/banking environment

Description

You will be responsible for the professional steering and further development of the group-wide Technical Exposure & Vulnerability Management. The role evaluates, prioritizes, and manages technical risks and real attack paths while considering the threat situation, criticality, operational reality, feasibility, and cost-effectiveness. You will coordinate sustainable risk reduction across platforms, providers, locations, and subsidiaries, and create alignment on technical risks and priorities across infrastructure, platforms, cloud, and operations.

Responsibilities

• Steer and develop group-wide Technical Exposure & Vulnerability Management in an international and complex banking environment
• Assess, prioritize, and manage technical risks and real attack paths (threat situation, criticality, operational reality, feasibility, and economics)
• Drive sustainable risk reduction across different platforms, providers, foreign locations, and subsidiaries
• Create a shared understanding of technical risks, priorities, and necessary actions across infrastructure, platforms, cloud, and operational interests
• Assess modern attack techniques, new attack paths, and AI-supported attack methods; derive pragmatic protection and hardening measures
• Act as a sparring partner for infrastructure, platform, cloud, and security teams as well as management stakeholders on technical risks, trade-offs, prioritization, and transformation topics
• Connect deep technical security expertise with enterprise risk management, transformation capability, and operational implementation strength in an international IT landscape

Requirements

• Multi-year hands-on experience in technical cyber security, Technical Exposure Management, Vulnerability Management, infrastructure security, or enterprise security in complex enterprise or banking environments
• Strong technical understanding of modern attack vectors, infrastructure/network/cloud/platform technologies, and typical attacker tactics
• Ability to reliably and realistically assess technical risks, real attack paths, and vulnerabilities across complex, heterogeneous enterprise IT landscapes
• Proven experience steering complex platform/provider/transformation contexts across legacy systems, modern technologies, and international operating models
• Ability to moderate technical trade-offs and priorities, bring management stakeholders along, and drive sustainable solutions aligned with the overall organization

Benefits

• Flexible working hours
• Sabbaticals
• Partly mobile work / home office
• Attractive company pension scheme
• Comprehensive health management
• Leasing options (e.g., Job-Rad, tablet, smartphone)
• Lunch offerings
• Multiple daycare centers