Cyber Security Engineer (m/f/d)

TYTAN Technologies; München; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Virtual stock options

Flexible benefits

Health care events

Referral bonus

Team events

Corporate discounts

Hybrid work model

Job summary

TYTAN Technologies is seeking a hands-on Security Engineer in Munich to secure endpoints and identities, own detection and incident response, and drive vulnerability management. You will lead in a high-impact, security-first environment, collaborating with external SOC partners and preparing for ISO 27001 and NIS2 audits.

The role requires deep Microsoft security expertise, English fluency, and relocation to Munich or current residency.

Qualifications

• 4+ years of hands-on security engineering in a Microsoft environment: Defender XDR, Entra ID and Intune.
• Proven deployment and tuning of Microsoft Defender XDR (Endpoint, Office 365, Identity) in a live tenant.
• Hands-on with Microsoft Sentinel or another SIEM: log onboarding, detection rules and alert tuning.
• Real incident response experience, from triage to lessons learned, and runbooks others can follow.
• You have run vulnerability management in a live environment: scanning, prioritisation, remediation and reporting.
• Endpoint hardening with Intune: security baselines, BitLocker, LAPS and attack surface reduction rules.
• Solid knowledge of Conditional Access, MFA and privileged access in Entra ID.
• Scripting and security automation with PowerShell and Microsoft Graph.
• Experience working with a managed SOC or external partners, and with ISO 27001 or NIS2 audits.
• Fluent English; fluent in German is close to a must
• Based in Munich or willing to relocate
• Eligible to work in the German defense sector: you sign confidentiality and export-control obligations and pass a security check

Responsibilities

• Harden endpoints and identities: Tune Defender XDR across endpoints, mail, identities and cloud apps
• Maintain Intune security baselines: BitLocker, LAPS, attack surface reduction and device compliance
• Review and test Conditional Access, MFA and Privileged Identity Management with the Infrastructure & Cloud Lead
• Help apply Microsoft Purview data protection, such as sensitivity labels and data loss prevention
• Detect and respond: take over detection tuning and ownership from our managed SOC in 2027
• Connect logs to Microsoft Sentinel and build and tune detection rules
• Steer our managed SOC and SOAR service: alert quality, escalations and service reviews
• Lead incident response in-house and write runbooks the team can follow
• Manage vulnerabilities: Run vulnerability management across endpoints, servers, cloud and network devices
• Prioritise findings by risk and drive fixes with the owning teams
• Publish a monthly vulnerability report with trends and open risks
• Secure production and engineering: support security of shop-floor, lab and test-bench networks
• Work with Information Security Officers on secure CI/CD and supply-chain checks
• Stay audit-ready: prepare ISO 27001 and NIS2 technical evidence and documentation

Skills

Defender XDR

Entra ID

Intune

Microsoft Sentinel

SIEM

Incident response

Vulnerability management

PowerShell

Microsoft Graph

ISO 27001

NIS2

German language

Munich-based

Security engineering

Tools

Defender XDR

Intune

Entra ID

Microsoft Sentinel

Job description

TYTAN Technologies

The PACE is fast. The expectations are high. The contribution matters. Working at TYTAN is more than a job, this is a mission. We push boundaries, think big, and hold ourselves to the highest standard. Our mission and values guide everything we do, and we're looking for people who are driven by ownership, embrace challenges, and are energized by meaningful work. If you're motivated by impact and thrive in dynamic environments, you'll fit right in.

At TYTAN, we aim to set a global standard in autonomous air defense with AI-driven, cost-efficient systems that counter unmanned aerial threats at scale. We protect people. We protect critical infrastructure. We protect European sovereignty.

We are looking for a hands-on engineer who knows the Microsoft security stack in depth. You secure our endpoints and identities, own detection and incident response, and run our vulnerability management. Today much of this runs with external partners: in 2027 you take it over and keep us ready for ISO 27001 and NIS2.

Your roadmap to make an impact

Harden endpoints and identities

• Tune Microsoft Defender XDR across endpoints, mail, identities and cloud apps

• Maintain Intune security baselines: BitLocker, LAPS, attack surface reduction and device compliance

• Review and test Conditional Access, MFA and Privileged Identity Management with the Infrastructure & Cloud Lead

• Help apply Microsoft Purview data protection, such as sensitivity labels and data loss prevention

Detect and respond

• Take over detection tuning and ownership from our managed SOC step by step in 2027

• Connect logs to Microsoft Sentinel and build and tune detection rules

• Steer our managed SOC and SOAR service: alert quality, escalations and service reviews

• Lead incident response in-house and write runbooks the team can follow

Manage vulnerabilities

• Run vulnerability management across endpoints, servers, cloud and network devices

• Prioritise findings by risk and drive fixes with the owning teams

• Publish a monthly vulnerability report with trends and open risks

Secure production and engineering

• Support security of shop-floor, lab and test-bench networks with the Infrastructure & Cloud Lead

• Work with our Information Security Officers on secure CI/CD and supply-chain checks

Stay audit-ready

• Prepare the technical side of ISO 27001 certification and NIS2

• Provide technical evidence and put our security policies into practice

• Document systems, detections and runbooks so the team can rely on them

• 4+ years of hands-on security engineering in a Microsoft environment: Defender XDR, Entra ID and Intune

• Proven deployment and tuning of Microsoft Defender XDR (Endpoint, Office 365, Identity) in a live tenant

• Hands-on with Microsoft Sentinel or another SIEM: log onboarding, detection rules and alert tuning

• Real incident response experience, from triage to lessons learned, and runbooks others can follow

• You have run vulnerability management in a live environment: scanning, prioritisation, remediation and reporting

• Endpoint hardening with Intune: security baselines, BitLocker, LAPS and attack surface reduction rules

• Solid knowledge of Conditional Access, MFA and privileged access in Entra ID

• Scripting and security automation with PowerShell and Microsoft Graph

• Experience working with a managed SOC or external partners, and with ISO 27001 or NIS2 audits

• Fluent English; fluent in German is close to a must

• Based in Munich or willing to relocate

• Eligible to work in the German defense sector: you sign confidentiality and export-control obligations and pass a security check

Nice to have

• Certifications such as SC-200, SC-100, AZ-500, SC-300 or GCIH

• Strong KQL for threat hunting and detection engineering

• Microsoft Purview: sensitivity labels, data loss prevention and insider risk

• OT security awareness, for example IEC 62443

• Purple teaming or attack simulation experience

• German BSI IT-Grundschutz

• Fluent German and already based in Munich (a big plus)

• Experience in a regulated or security-sensitive industry

Why TYTAN?

• Build technology with real operational impact: Develop autonomous defense systems designed to protect lives and strengthen Europe’s security

• Shape scalable defense capabilities: Work on solutions built for mass deployment, cost efficiency, resilience, and reliable production at scale

• Contribute to networked air defense: Help integrate our systems into multi-layered defense architectures alongside sensors, command systems, and effectors

• Develop for real-world operations: Build capabilities together with end users and improve them continuously based on direct operational feedback

• Move fast and take ownership: Work in a focused, high-performance team where decisions are made quickly and individual contributions have immediate impact

• Define a new generation of defense technology: Join early and help shape the products, engineering standards, culture, and direction of a fast-growing deep-tech company

• Work with an international mission-driven team: Collaborate with experienced specialists united by the goal of creating sovereign and effective security capabilities for Europe

Our Benefits

• Virtual stock options: Participate in our success through virtual stock options (VSOPs) at the company's current valuation

• Monthly allowances: €106/month in flexible benefits including lunch discounts and EGYM Wellpass or shopping credit

• Regular health care events: Health check-ups, skin screenings, mental health workshops, and an annual vitamin infusion on us

• Referral bonus: Earn a reward when someone you refer joins the team

• Regular team events: On- and off-site activities to connect and celebrate together

• Corporate discounts: Exclusive employee discounts across a wide range of partner brands

• Flexibility: Flexible working hours and hybrid work model, plus a modern Munich office built for focus and collaboration

About us

At TYTAN, it is more than just a job; it is about embracing autonomy, personal growth, and purpose. Make a lasting impact in the new era of defense! Join us to create a safer world for all.

WE are an equal-opportunity employer committed to fairness and inclusivity. We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process.

Please note that we currently do not offer visa sponsorship, so we’re only able to consider candidates who already have a valid work permit. All qualified applicants are hereby encouraged to apply.