Senior Consultant Cybersecurity Engineer

Qestit Ag; Germany; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Modern hardware

Exciting projects

Performance-based salary

Tailored training and development

Team events

Health coverage

Fitness options

Family-oriented environment

Job summary

Qestit Ag in Germany seeks a Senior Consultant Cybersecurity Engineer to implement security measures, harden cloud, container and on‑prem environments, and drive DevSecOps to secure our clients' IT landscapes effectively.

You will deliver security tooling across CI/CD (SAST/DAST/SCA), manage SIEM/EDR/WAF/IAM/PAM, perform threat analyses, and translate regulatory requirements into practical security architectures for cloud, hybrid and on‑prem environments.

Qualifications

• Degree in computer science, information security or related field or comparable training.
• Security-focused engineer with DevOps experience.
• Experience in IT architectures and cloud security.
• Proficiency with at least one major cloud platform and container security.
• Familiar with threat modelling approaches and standard security controls.
• Scripting skills (Python/PowerShell/Bash) and IaC experience (Terraform/Ansible).
• Knowledge of MITRE ATT&CK/OWASP Top 10 and relevant security standards.

Responsibilities

• Implement security measures and harden cloud, container and on‑prem environments.
• Integrate security tools in CI/CD pipelines (SAST, DAST, SCA, secret scanning).
• Operate and optimize SIEM, EDR, WAF, IAM and PAM systems.
• Conduct vulnerability analyses, drive remediation with teams and advise clients.
• Automate recurring security tasks with scripting and IaC.
• Design secure architectures for cloud, hybrid and on‑prem systems.
• Translate regulatory requirements (NIS2, CRA, DORA, ISO 27001) into architecture guidelines.

Skills

Cloud security

DevSecOps

Threat modelling

Scripting (Python)

Kubernetes security

Threat detection

Education

Bachelor's degree in CS or related field

Tools

Terraform

Ansible

Azure / AWS / GCP

Kubernetes

Job description

Senior Consultant Cybersecurity Engineer

Germany

Senior Consultant Cybersecurity Engineer, you implement security measures, harden cloud, container and on-prem environments and drive DevSecOps forward to secure our clients' IT landscapes effectively.

18 offices across 7 countries and over 900 employees, we offer you the opportunity to work on exciting projects with prestigious clients. We promote your professional and personal development from day one and offer flexible working hours as well as the option to work remotely. Our corporate culture is familial, open, and appreciative, providing plenty of room for your personal development.

Responsibilities

You implement security measures and harden cloud, container and on-prem environments.

In CI/CD pipelines, you integrate security tools (SAST, DAST, SCA, secret scanning) and drive DevSecOps forward.

Operating and optimising security systems such as SIEM, EDR, WAF, IAM and PAM falls within your area of responsibility.

You carry out vulnerability analyses, assess findings, steer remediation together with the teams and advise clients on an equal footing.

With scripting and infrastructure as code, you automate recurring security tasks.

Depending on your level of expertise, you design secure architectures for cloud, hybrid and on-prem environments and support development teams across the entire SDLC.

Likewise, depending on your expertise, you translate regulatory requirements (NIS2, CRA, DORA, ISO 27001, BSI IT-Grundschutz) into actionable architecture guidelines and define reference architectures, security patterns and standards for IAM, network segmentation, cryptography and logging/monitoring.

Qualifications

You have successfully completed a degree in computer science or business informatics, or can demonstrate comparable training.

As a security, system or DevOps engineer, you bring experience with a clear security focus.

Experience in IT architectures gives you a major advantage.

You are well versed in at least one major cloud platform (Azure, AWS, GCP) as well as in container and Kubernetes security.

Confident use of methods such as STRIDE, attack trees or comparable threat-modelling approaches is part of your toolbox.

You have scripting skills (e.g. Python, PowerShell, Bash) and experience with infrastructure as code (Terraform, Ansible).

A good understanding of networks, secure software development, operating system hardening and common attack techniques (e.g. MITRE ATT&CK, OWASP Top 10, SAMM) is among your strengths.

Ideally, you hold certifications such as OSCP, CompTIA Security+, AZ-500, CKS, CISSP, CCSP, SABSA or TOGAF.

A hands‑on mentality, team spirit and good German and English skills round out your profile.

The Benefits We Bring to You:

• Modern hardware and equipment
• Exciting projects
• Attractive, performance‑based salary
• Tailored training and development opportunities
• Team events
• Health coverage
• Fitness options
• Supportive, family‑oriented environment