Senior IT Security Engineer

Quick Facts

• Role: Senior IT Security Engineer (Security Operations, Security Architecture, Incident Response)
• Work style: Trust-based working hours; responsible, results-oriented work; training and development support
• Location: Berlin, Lübeck, or Germany-wide remote

Description

You will work at the intersection of Security Operations, Security Architecture, and Incident Response and develop security solutions for a complex network of modern technology companies. The role combines operational security work with strategic architecture development, with influence over the selection and further development of security technologies.

Responsibilities

• Continuously improve monitoring and alerting processes, analyze security alerts, detect potential threats early, and ensure timely actions
• Lead incident response during security incidents and further develop emergency procedures with internal and external stakeholders
• Operate and optimize existing security solutions; evaluate new technologies vendor-independently by security, benefit, and effort; support introduction into live operations
• Drive strategic evolution of the security tool landscape and actively shape the future security architecture for network, endpoints, server infrastructure, and cloud environments
• Analyze security processes and identify opportunities for efficient automation; assess the added value of AI-based solutions
• Collaborate with IT operations, network, cloud and infrastructure teams, data protection, compliance, and external service providers; communicate technical risks and solution proposals for different audiences
• Document security measures and support evidence, audits, and reporting on the current security posture

Requirements

• Long-term practical experience in IT security, comfortable across operational tasks, technical implementation, and conceptual work
• Experience with Security Monitoring, incident handling, and SIEM, EDR/XDR, NDR; plus network, endpoint, and identity security
• Understanding of security requirements for modern IT landscapes, including on-premise and cloud security; ability to evaluate and evolve security architectures and translate them into practice
• Experience evaluating, implementing, or evolving security solutions; willingness to learn new technologies; ideally experience with Cisco- or Microsoft-based security solutions
• Familiarity with Zero Trust, network segmentation, vulnerability and patch management, and standards such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, and NIS-2
• German C1 and English B2 proficiency
• Ability to explain technical risks clearly and represent your professional position confidently to IT teams, business units, management, and stakeholders
• Certifications like CISSP, CISM, or GIAC are a plus; practical experience and continuous learning are essential

Benefits

• Trust-based working hours, sabbaticals, and flexible planning of 30 vacation days with options for additional flexible days
• Training, knowledge days, exploration days, peer feedback, and individual development programs
• Fitness and Deutschlandticket subsidy, company health insurance, meal allowance, and Jobrad
• No micro-management; responsible and independent project work with room for your ideas