IT Security Engineer (all genders)

getolo GmbH; Berlin; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work 1–2 days in Berlin office

Office in Berlin-Mitte

Mobility subsidy (VBB/Deutschlandtiket

Learning budget

Team events

Job summary

getolo GmbH is seeking an IT Security Engineer to own Security Operations end-to-end in a hybrid Berlin setting. You will run SIEM, orchestrate responses with SOAR, and manage EDR across our fleet while leading incident management and vulnerability remediation.

The role requires 4+ years in security operations and strong scripting skills. You will contribute to security architecture, governance, and audits, collaborating with IT and engineering teams.

Qualifications

• Hands-on security operations experience (SOC/blue team)
• SIEM onboarding, rule tuning and investigations
• Orchestration and response with SOAR
• EDR and MDM-managed endpoints experience
• Incident response leadership and containment
• Vulnerability management and remediation tracking
• ISO 27001, NIST CSF, CIS Controls or similar familiarity
• Scripting for automation (Python/PowerShell/Unix)
• Fluent English communication with stakeholders

Responsibilities

• Own Security Operations end-to-end (SIEM, detection & response)
• Automate orchestration and response with SOAR
• Operate and secure endpoints across fleet
• Lead incident management from detection to closure
• Oversee vulnerability management coordination with IT/engineering
• Coordinate internal/external penetration tests and remediation
• Contribute to security architecture and governance input
• Support audits and security training

Skills

SIEM

SOAR

EDR

Incident response

Vulnerability management

Cloud security

Python scripting

Security governance

Job description

Support us in designing the insurance experience of the future. As an IT Security Engineer you own IT Security Operations at getolo end to end: running our detection and response capability day to day, keeping endpoints and infrastructure hardened, and driving incidents, vulnerabilities and findings to closure. Security operations is the core of this role. Beyond it, you bring an operator's perspective into how we design systems and into our governance work, to ensure control effectiveness.

This is a full-time hybrid role, with 1–2 days per week working from our Berlin office.

Your Mission

Security Operations - your primary function

• Run and continuously improve our SIEM: log source onboarding, detection rules, tuning, alert quality
• Automate orchestration and response with SOAR
• Operate endpoint protection across our fleet
• Triage and manage alerts, driving them to closure or escalation
• Lead incident management from detection through containment, recovery and post-incident review
• Detect and remediate configuration drift against hardening baselines; run technical audits
• Oversee vulnerability management: scanning, prioritisation, and remediation tracking with IT and engineering
• Plan and coordinate penetration tests (internal and with external providers) and drive remediation

Security Architecture - supporting

• Contribute to security best practices and standards for infrastructure, endpoints, identity and SaaS
• Bring security design input into new systems and projects early
• Act as a security advisor to IT, engineering and the wider business

Security GRC - supporting

• Feed operational reality into security policies, the risk register and control design
• Support internal and external audits with evidence collection and remediation of findings
• Contribute to security awareness trainings
• Support third-party and vendor security assessments
• Deliver operational input for management reporting on security posture, KPIs and incidents

What You Will Need to Succeed

• 4+ years in security operations, SOC, blue team or a comparable hands-on security role
• Hands-on SIEM experience: onboarding sources, writing and tuning detections, running investigations
• Knowledge of orchestration and response with SOAR
• Solid experience with EDR and MDM-managed endpoint fleets (macOS and Windows)
• Practical incident response experience and the composure to lead an incident
• Vulnerability management from scanning through remediation, including pentest coordination
• Working knowledge of ISO 27001 or comparable frameworks (Grundschutz, NIST CSF, CIS Controls, DORA) and how controls map to daily operations
• Scripting for automation (Python, PowerShell, Unix shell)
• Clear communicator who can explain risk to non-security stakeholders and write for management
• Experience with cloud first tech stacks running on SaaS and PaaS
• Fluent English

What Would Make You Stand Out

• Certifications such as GCIH, GCIA, CISSP or Security+
• Cloud and identity security experience (e.g. Microsoft 365 / Entra ID, AWS or GCP)
• Detection engineering or threat hunting background
• Prior involvement in audits (ISO 27001, SOC2 or similar)

Why getolo?

Salary & Vacation

• Attractive fixed salary
• Start with 28 vacation days, with an increase every two years (capped at 30 days). Holidays on December 24th and 31st.

Mobility & Flexibility

• Choose between a free Swapfiets bike, or a Berlin/Brandenburg ticket (“VBB - Jobticket”) or BVG “Deutschlandticket” subsidized by us
• Work hybrid - from your home office or in our office in Berlin-Mitte
• Work abroad in the EU for up to 60 days

Health

• Benefit from free coaching sessions with nilo.health, our mental health tool
• Test our products yourself! Choose between dentolo, petolo or vitolo

Development

• Learning Budget starting from 750 € per year
• Regular (360 degree) feedback

Berlin Based, International Mindset

• We communicate, collaborate, and celebrate in English to ensure everyone is included
• Our diverse team spans from 33 different countries

Values

• Our values are not buzzwords, but actions that are a part of our individual and collective DNA:
• #fast: We simplify, move with urgency, and focus on outcomes
• #brave: We take bold decisions, challenge the status quo, and act with conviction
• #accountable: We deliver end-to-end, reduce dependencies, and own our decisions
• #caring: We treat each other with respect, build trust, and create an environment where everyone can thrive

And much more…

• Legendary summer and winter parties
• Regular team events
• Many discounts on the corporate Benefits Platform
• Two Community Days per calendar year
• Pet friendly office

Sounds like the perfect job for you? We look forward to receiving your application and getting to know you!

About getolo

Founded in 2015, getolo GmbH is an innovative and award-winning InsurTech company that offers comprehensive supplementary insurance plans in the areas of dental, pet health and liability, as well as health add-on coverage. Under the brands dentolo, petolo, patolo and vitolo, we serve over 265,000 customers across Germany, France and Spain, providing digital and hassle-free protection that seamlessly integrates into their daily lives.
We believe that prevention is always better than cure—which is why we focus on preventive care, customer-centric service, and financial security to protect our customers and their loved ones from unexpected costs. Thanks to the close collaboration of our team of market specialists and insurance experts, we continuously monitor industry developments to offer practical solutions for current challenges.
getolo's company culture is built on collaboration, innovation, and agility—always with a strong focus on the needs of our customers. With a team of around 300 employees, getolo is led by Daniel Gadea (CEO) and Laura Wulff (CGO). getolo is a partner of DA Direkt and part of the Zurich Group Germany.

getolo is an equal opportunity and diversity employer. We strive to create a friendly, safe, and welcoming environment for all our team members, regardless of ethnicity, gender, gender identity and expression, sexual orientation, limitations and talents of any kind, physical appearance, social background, marital status, age, or religion (or lack thereof).

When you apply, we focus solely on your experience and motivation. You decide what additional information you want to disclose (photo, marital status, religion, gender, nationality, etc.). We value and treat all applications equally.

Contact:

getolo Recruiting Team
[e-mail]