information security engineer in industrial software

HireHi; Berlin; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

The PSI Group ищет квалифицированного специалиста по информационной безопасности и системной инженерии. Ваша роль включает анализ архитектур как на месте, так и в облаке, работу над безопасностью IAM, MDM и сетями, а также участие в управлении рисками и инцидент-response.

Требуется опыт в Terraform, Python, Bash и знание SDLC/агильных процессов. Условия работы остаются гибкими, присутствие в Berlin приветствуется, возможность взаимодействия с международными командами.

Qualifikationen

• Требуется системная инженерия и сетевые знания, IAM и криптография.
• Понимание инструментов безопасности: Cloud Security Posture Management, MDM, Office365.
• Знание процессов разработки ПО (SDLC) и методик agile.
• Умение писать скрипты на Python / shell, базовые навыки программирования.

Aufgaben

• Проводить технический анализ и обзор архитектур на месте и в облаке.
• Консутствовать с заинтересованными сторонами по улучшениям архитектур и конфигураций.
• Работать с IT-командами по вопросам безопасности: IAM, мобильные устройства, сеть.
• Участвовать в управлении техническими рисками и инцидент-response.
• Расширять SOC-процедуры: логирование и управление уязвимостями.
• Поддерживать меры ИС и комплаенс по данным.
• Настраивать централизованные информационные сервисы безопасности для бизнес-подразделений за рубежом.
• Автоматизировать ИБ-активности; участвовать в due-diligence.
• Формировать культуру информационной безопасности и соответствия данных.

Kenntnisse

System engineering

Networking

IAM & encryption

Cloud security (Terraform)

Python & bash scripting

Security risk management

SDLC | Agile

Communication skills

Lean/Agile mindset

English fluent

Tools

Jenkins

Confluence

Jira

Jobbeschreibung

Описание: The PSI Group develops software products that optimize the flow of energy and materials for utilities and industry. It produces process control systems supporting sustainable energy supply, production, and logistics by combining AI methods with industrially proven optimization methods. Its products can be operated on-premises or in the cloud.

Задачи

• Perform technical analysis and review of on-premises and cloud system architectures and configurations;
• Identify and advise stakeholders on technical improvements to system architectures and configurations;
• Collaborate with technical stakeholders, including internal IT teams, software developers, and technical product managers, on security topics such as identity and access management, mobile device management, and network security;
• Perform technical risk management activities, including risk identification, evaluation, and assessment;
• Conduct and support information security incident response activities;
• Enhance existing security operations setups with tools and procedures;
• Support the implementation of technical and organizational measures, such as improving central logging and vulnerability management;
• Set up central technical information security services for business units and subsidiaries abroad;
• Automate information security-related activities;
• Participate in information security-related due diligence activities;
• Strengthen the information security and data compliance culture within PSI.

Требования

• System engineering knowledge, including technical architectures and networking;
• Understanding of technical security measures such as encryption and IAM;
• Familiarity with information security tools such as Cloud Security Posture Management, Mobile Device Management, and Office365;
• Familiarity with business tools and enterprise architecture, such as Jenkins, Confluence, and Jira;
• Understanding of information security attacks, security operations, and incident response;
• Basic scripting and programming skills, such as Python and shell/bash;
• Knowledge of information security risk management;
• Knowledge of network design and architecture;
• Knowledge of cloud security and Terraform;
• Understanding of SDLC and software development;
• Analytical skills and an ownership mindset;
• Good understanding of lean and agile practices;
• Good communication and interpersonal skills;
• Fluent written and spoken English;
• Enthusiasm for information security, intrinsic motivation, curiosity, quick thinking, and continuous learning;
• Proactive, collaborative attitude and ability to work comfortably in a lean and agile environment;
• Nice to have: German, technical certifications such as CISSP, Cloud Security Certifications, or GIAC, scripting and programming skills such as JS, Ruby, or Python.

Условия

No conditions specified