Protection Engineer

Quick Facts

• Role: Protection Engineer (m/w/d)

• Focus: Protection and detection technologies for modern cyber threats

• Location: Bochum or remote across Germany

Description

You will design, develop, and maintain protection and detection mechanisms to identify and stop current and emerging attack techniques. You will also create tools and scripts to streamline detection, analysis, and response, support analysts with documentation and knowledge transfer, and perform attack simulations to continuously improve defenses.

Responsibilities

• Design, develop, and maintain protection and detection technologies (e.g., Sigma, YARA, behavioral heuristics, AMSI, ETW, Windows Event Logs)

• Develop tools and scripts to make detection, analysis, and response processes more efficient

• Assess and describe suspicious activities, TTPs, and security-relevant artifacts to support analysts

• Conduct attack simulations to continuously enhance protection mechanisms

Requirements

• Experience with detection technologies or detection frameworks and protection mechanisms on Windows/Linux/macOS

• Knowledge of MITRE ATT&CK with the ability to classify and describe attack techniques

• Proficiency in one or more scripting/programming languages: Python, PowerShell, Ruby, Perl

• Experience in offensive security (pentesting, red teaming, adversary simulation) or strong understanding of the attacker side

• Analytical, structured approach and clear communication

• Fluent German (at least C1) and good English

Benefits

• Flexible working hours and work location (Bochum or remote)

• Structured onboarding with modern equipment and team support

• 30 days of vacation

• Room to shape ideas, plus training and language courses

• Attractive retirement plan with high employer contribution

• Good mobility options and discounts

• Bio catering, campus-like environment, guild concept and team events