(Principal) IT Security Consultant: Secure by Design (m/f/d)

CLOUDYRION; Düsseldorf; Hybrid; EUR 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

30 vacation days plus additional leave

Hybrid work with remote days

Individual learning and development opportunities

In-house gym and recreational spaces

Zusammenfassung

CLOUDYRION in Düsseldorf is seeking experienced Secure by Design Consultants to lead transformation programmes for large enterprises. You'll manage technical strategies, relationship with clients, and deliver project outcomes. With at least 7 years of cybersecurity experience and in-depth knowledge in cloud security, your role includes shaping AI security programmes and building Secure SDLC strategies. The company offers a hybrid work model, generous vacation days, and a supportive work environment.

Qualifikationen

• At least 7 years’ experience in cybersecurity.
• Proven track record leading end-to-end client programmes.
• Expertise in CI/CD, IaC, containers.

Aufgaben

• Lead end-to-end 'secure by design' transformation programmes.
• Shape a company-wide AI security programme.
• Build a Secure SDLC programme from scratch.

Kenntnisse

Cloud security expertise (AWS, Azure, GCP)

Cybersecurity leadership

Secure SDLC knowledge

Experience in AI security

Transformational experience

Ausbildung

Certifications in cloud security (CCSP, AWS/Azure/GCP)

Jobbeschreibung

Right now, the wave of AI-ready cyber resilience and EU regulations (NIS2, DORA, EU CRA, EU AI Act) is reshaping how every large organisation in Europe approaches cybersecurity. Our Secure by Design practice is at the heart of this shift and takes it a step further: Compliance with regulatory requirements is a given for us, sustainable technical implementation is what we pride ourselves on: outcome-based rather than hour-based, knowledge-focused rather than leverage-focused, product-led rather than slide-led.

To continue meeting our clients’ needs whilst maintaining our quality standards, we are seeking experienced Secure by Design Consultants to help shape our scale.

The Role

You will lead end-to-end ‘secure by design’ transformation programmes for our enterprise clients. These projects span several quarters and involve multiple teams, with you being responsible for the technical strategy, customer relationships and the final outcome.

Specifically, this means, for example:

• Lead a Secure by Design transformation within the product organisation of a DAX 30 client, involving over 100 engineers, more than 20 product teams and a 18-month roadmap. You will be responsible for the target architecture, the rollout plan and the communication with the CISO and CTO.
• Run a cloud security programme for a critical infrastructure operator preparing for an audit. You will define the control framework, risk assessment and security architecture, integrate these into AWS/Azure/GCP landing zones, and report to senior management.
• Shape a company-wide AI security programme (LLMs, agent-based systems, MLSecOps) for a client preparing for the EU AI draft, implementing the regulation into technical reality.
• Building a Secure SDLC programme from scratch for a fast-growing product company, including CI/CD security tools, large-scale threat modelling, a network of security officers, and KRIs that the board actually reads.

Internally, you’ll help shape the practice itself: methodologies, accelerators, recruitment, talent development, and the development of our AI-powered Secure-by-Design product.

Your Profile

Must haves

• At least 7 years’ experience in cybersecurity, with a proven track record of successfully leading end-to-end client programmes for large enterprises
• In-depth technical expertise in cloud security (AWS, Azure or GCP) and modern software development practices (CI/CD, IaC, containers)
• Hands-on experience in leading transformations in the areas of ‘Secure-by-Design’, security architecture, Secure SDLC, cloud security or AI security at enterprise level
• You are comfortable steering the room with CISOs, CTOs and product leadership and at ease in an architecture deep-dive with a senior engineer
• Ready to work on-site three days a week and open to working at our clients’ sites in the DACH region for up to five days a month
• Experience in at least one of the following areas: AI security / MLSecOps, Kubernetes platform security, regulatory programmes (NIS2, DORA, CRA, EU AI Act)
• Certifications in cloud security (CCSP, AWS / Azure / GCP Security Specialty)
• Proven track record in building and managing consulting teams or security champions
• You have a public presence, e.g. through presentations, publications, OSS, or a blog

Why CLOUDYRION

• We support EU Blue Card sponsorship and offer a relocation package for international hires
• 30 days of vacation plus additional days off on Christmas, New Year’s Eve, and your birthday
• Hybrid work with two remote days per week, trust-based working hours and the opportunity of Workations in any EU country
• Individual learning and development opportunities, including full coverage of advanced trainings, certification costs, and educational leave for exam days
• In-house gym, massage chairs, gaming area, and dedicated break spaces
• Regular team events and plenty of space for real collaboration

About CLOUDYRION

CLOUDYRION was founded in 2020, bootstrapped and built around a simple idea: cybersecurity done properly, by people who actually care.

We work with large enterprises in the telecoms, banking, insurance, automotive and critical infrastructure sectors. Our Secure by Design, Ethical Hacking and Secure Strategy Consulting services help them get security right from the ground up.

Our founder as CEO and free from investor influence, we are still upholding our values five years on: Fail fast and learn quickly. Be a ray of sunshine. Tear down those walls.

Working at CLOUDYRION means being part of a team who love what they do, embrace diversity and celebrate their successes together.

This approach has proven its worth: our team now consists of 35 people and generates an annual turnover of around €6 million.

Contact

Katharina - People & Culture

You can find information on data protection during the application process at CLOUDYRION here.