Senior IT Security Engineer (Security Architecture)

Quick Facts

Role: Senior IT Security Engineer (Security Architecture)

Focus: Security Operations × Security Architecture × Incident Response

Work model: Full-time; remote within Germany (also possible from Berlin or Lübeck)

Description

Develop and evolve security solutions across a distributed technology network by connecting monitoring, incident response, and security architecture. You will improve security processes and tooling for network, endpoints, servers, and cloud environments, while evaluating new technologies and driving automation and continuous improvement. You will also support documentation, audits, and evidence for the current security posture.

Responsibilities

• Advance monitoring and alerting processes; analyze security alerts and identify potential threats early.
• Lead the incident response process during security incidents and improve “day-of-incident” procedures.
• Operate and optimize existing security solutions; evaluate new technologies independently (security, value, effort) and support rollout into production operations.
• Drive strategic development of the security tool landscape and help design future security architectures for network, endpoints, servers, and cloud.
• Analyze security processes to find opportunities for efficient automation; assess the added value of AI-based solutions.
• Collaborate with IT operations, networking, cloud and infrastructure teams, data protection, compliance, and external service providers; translate risks and solution recommendations for different audiences.
• Document security measures and support evidence, audits, and reporting on the current security status.

Requirements

• Long practical experience in IT security, covering operational tasks, technical implementation, and conceptual work.
• Experience with security monitoring and incident handling, including SIEM, EDR/XDR, or NDR.
• Experience with network, endpoint, and identity security.
• Ability to evaluate and implement security architectures for both on-premise and cloud environments.
• Experience evaluating, introducing, and improving security solutions; proactive learning and constructive challenge of existing approaches (ideally Cisco- or Microsoft-based security solutions).
• Familiarity with Zero Trust, network segmentation, vulnerability and patch management, and standards such as ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, and NIS-2.
• German (C1) and English (B2) communication skills.
• Ability to clearly explain technical risks and represent your viewpoint confidently to IT teams, business units, management, and stakeholders.
• CISSP, CISM, or GIAC is a plus; practical experience and willingness to keep upskilling are required.

Benefits

• Trust-based working hours; sabbaticals
• Flexible vacation planning (30 days) with an option for 20 additional flex days
• Independent, outcome-oriented work without micromanagement or classic hierarchies
• Training, knowledge days, exploration days, peer feedback, and individual development programs
• Fitness and Germany ticket subsidy
• Company health insurance, meal allowance, and JobRad