Senior IT Security Engineer (Security Architecture & Operations)

Quick Facts

• Role: Senior IT Security Engineer (Security Architecture & Operations)
• Focus: Security Operations, Security Architecture, and Incident Response
• Employment: Permanent full-time position (remote options mentioned)

Description

You will work at the intersection of Security Operations, Security Architecture, and Incident Response, developing and improving security solutions for a complex modern technology network. The role includes evolving monitoring and alerting, leading incident response, operating and optimizing security tooling, and shaping the future security architecture across network, endpoints, server infrastructure, and cloud environments. You will also drive security process improvements through automation and evaluate the added value of AI-based solutions.

Responsibilities

• Develop monitoring and alerting processes, analyze security alerts, recognize potential threats early, and ensure timely actions
• Lead incident-response processes; coordinate appropriate measures with internal and external stakeholders and continuously improve crisis procedures
• Operate and optimize existing security solutions; evaluate new technologies independently of vendors for security, benefit, and effort; support introduction into live operations
• Drive strategic development of the security tool landscape and actively shape future security architecture for network, end devices, server infrastructure, and cloud environments
• Analyze existing security processes to identify opportunities for efficient automation and assess targeted value of AI-based solutions
• Work closely with IT operations, network, cloud, and infrastructure teams, data protection, compliance, and external service providers; communicate technical risks and solution proposals clearly to different audiences
• Document technical security measures and support required evidence, audits, and reporting on current security posture

Requirements

• Long practical experience in IT security, spanning operational tasks, technical implementation, and conceptual work
• Experience with security monitoring, incident handling, and modern security technologies such as SIEM, EDR/XDR, or NDR, including network, endpoint, and identity security
• Solid understanding of security requirements for modern IT landscapes; experience with on-premise and cloud security
• Ability to assess and evolve security architectures and translate them into day-to-day practice
• Experience evaluating, introducing, or further developing security solutions; willingness to get up to speed with new technologies
• Familiarity with Zero Trust, network segmentation, vulnerability and patch management, and standards such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, or NIS-2
• German at C1 level and English at B2 level
• Ability to clearly explain technical risks and confidently represent your technical position to IT teams, business units, management, and stakeholders
• Cisco- or Microsoft-based security solution experience is desirable; CISSP, CISM, or GIAC certifications are a plus

Benefits

• Trust-based working hours, sabbaticals, and flexible vacation planning (30 vacation days plus up to 20 additional flex days)
• Independent work with responsibility and no classic hierarchies
• Training and individual development programs
• Additional benefits such as fitness and Deutschlandticket subsidy, company health insurance, meal allowance, and Jobrad