Information Security Engineer (f/m/d)

PSI Software; Berlin; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

PSI Software is seeking an Information Security Engineer (m/f/d)in Berlin to analyze and review system architectures and configurations across on-premises and cloud environments. You will collaborate with stakeholders on security topics, strengthen incident response, and drive improvements in central logging, vulnerability management and security operations.

You will work with IT, developers and product managers to implement security controls, manage risks, and support due diligence activities.

Qualifikationen

• System engineering knowledge including architectures and networking.
• Understanding of technical security measures and encryption/IAM.
• Familiarity with information security tools (Cloud Security Posture Management, MDM, Office365).
• Familiar with enterprise tools and EA (Jenkins, Confluence, Jira).
• Understanding of information security attacks, operations and incident response.
• Basic scripting and programming (Python, shell)
• Knowledge of information security risk management.
• Network design and architecture principles.
• Cloud security and Terraform knowledge.
• Understanding of the SDLC and software development.
• Analytical thinking and problem solving.
• Ownership mindset for tasks and delivery.
• Good communication and collaboration in lean/AGILE environments.
• Fluency in English; German a plus.
• Willingness to quickly learn and adapt
• Curiosity and analytical mindset
• Strong, clear communication
• Proactivity and team collaboration
• Ability to work in lean and agile settings
• Certifications in security (CISSP, GIAC, etc.)
• Scripting languages (JS, Ruby, Python)

Aufgaben

• Perform technical analysis and review of systems architectures and configurations (on-premises & cloud).
• Identify improvements to architectures and configurations and consult stakeholders.
• Collaborate with IT, developers, and product managers on security topics (IAM, MDM, network security).
• Conduct risk management activities from a technical perspective.
• Support information security incident response activities.
• Enhance security operations with tools and procedures.
• Assist in implementing technical and organizational measures (logging, vulnerability mgmt).
• Set up central technical information security services for units abroad.
• Automate information security activities.
• Participate in information security due diligence.
• Strengthen information security and data compliance culture at PSI.

Kenntnisse

System engineering

Security fundamentals

Security tools

DevOps tools

Threat monitoring & IR

Scripting (Python)

Risk management

Network design

Cloud security / Terraform

SDLC understanding

Analytical skills

Ownership & Agile

Communication

English proficiency

Fast learner

Curiosity

Proactivity

Agile mindset

Certifications

Scripting languages

Tools

Jenkins

Confluence

Jira

Jobbeschreibung

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

About the Role

The role involves performing technical analysis and review of systems architectures and configurations, collaborating with stakeholders on security topics, and enhancing existing security operations. For our headquarters and our Team Security & Resilience in Berlin Mitte we are looking for a dedicated support as Information Security Engineer (m/f/d).

Responsibilities

• Perform technical analysis and review of systems architectures and configurations (on-premises & cloud)
• Identify and consult stakeholders on technical improvements to the systems architectures and configurations
• Collaborate with technical stakeholders (e.g. internal IT team, software developers, technical product managers, etc.) on security topics (e.g. identity and access management, mobile device management, network security, etc.)
• Perform risk management activities (e.g. risk identification, evaluation and assessment) from a technical perspective
• Conduct and support information security incident response activities
• Enhance existing security operations setup with tools and procedures
• Support implementation of technical and organizational measures such as improving our central logging, vulnerability management, etc.
• Setup central technical information security services for business units and subsidiaries abroad
• Automate information security relevant activities
• Participate in information security relevant due diligence activities
• Strengthen the information security and data compliance culture within PSI

Qualifications

• System engineering knowledge (incl. technical architectures, networking, etc.)
• Understanding of technical security measures (e.g. encryption, IAM, etc.)
• Familiarity with common information security tools (e.g. Cloud Security Posture Management, Mobile Device Management, Office365, etc.)
• Familiar with relevant business tools and enterprise architecture (e.g. Jenkins, Confluence, Jira, etc.)
• Understanding of information security attacks as well as information security operations and corresponding incident response
• Basic scripting and programming skills (e.g. python, shell/bash)
• Knowledge about information security risk management
• Network design and architecture
• Cloud security and terraform knowledge
• Understanding of SDLC and software development
• Analytic skills
• Ownership mindset for tasks
• Good understanding of lean and agile practices
• Good communication and interpersonal skills
• Fluency in written and spoken English (German is a plus)
• Quick thinking and continuous learning personality and thus are able to dive into new topics quickly, filter and digest the relevant information
• Inquisitive and analytical mindset
• Great communication skills, clear and to the point
• Proactivity driver attitude happy to collaborate with others
• Ability to work comfortably in a lean and agile environment

Preferred Skills

• Technical Certifications (CISSP, Cloud Security Certifications, GIAC...)
• Scripting and programming skills (e.g. JS, Ruby, python)