Senior Cyber Security Engineer (Application & Cloud Security) - (f/m/d) - Berlin based

Humanoo; Berlin; Hybrid; Vertraulich; Vollzeit

Zusammenfassung

A healthcare technology company in Berlin is seeking a Cybersecurity Lead to drive security practices across its European business. You'll collaborate globally, shape security strategies, and ensure compliance. Ideal candidates have extensive experience in cybersecurity, penetration testing, and a passion for solving complex challenges. A diverse and inclusive work culture is emphasized.

Leistungen

Health insurance coverage

Up to 33 days annual vacation

Learning and development budget

Referral bonus

Employee Assistance Programme (EAP)

Qualifikationen

• 5+ years in IT/network security, preferably in a consulting role.
• 3+ years experience with penetration testing and application security.
• 2+ years in DevOps or DevSecOps environments.

Aufgaben

• Lead cybersecurity practices for Humanoo in the EU.
• Drive adoption of security services in the region.
• Coordinate response to cyber incidents effectively.

Kenntnisse

Cybersecurity expertise

Communication skills

Problem-solving

Scripting (Python, PowerShell)

Flexibility in working environments

Ausbildung

Relevant Security Certifications

Tools

BurpSuite

OWASP

Cloud Security tools

Jobbeschreibung

HELLO THERE! PEOPLE AT HUMANOO ARE HAPPY TO GREET YOU!

Location: Berlin (Hybrid)
Start: ASAP
Employment: Full-time, permanent

With a team of 90 people from over 28 nationalities, Humanoo, a Telus Health company, is building a unique holistic platform that makes people healthier. We are ambitious, goal-oriented, and enjoy creating a positive, inclusive atmosphere.

You’ll join us as part of TELUS Health’s Chief Security Office (TH CSO) – a globally recognised, mature cyber security organisation protecting healthcare technologies worldwide. This role will empower you to lead and shape security practices across our European business, while collaborating with a global team of top cyber professionals and technologists.

You’ll act as the cyber security lead for Humanoo and support the broader European region across security services, product security design, and incident response. This is more than a job — it’s a high-impact mission to secure our health-tech products at global scale.

Tasks

• Be the go-to cybersecurity expert for Humanoo and our EU region, reporting to both the CIO (Christophe Klarner) and TELUS Health CSO Director (Kevin Watkins)
• Drive adoption of TH CSO services in vulnerability management, incident response, detection & monitoring, DevSecOps, cloud and application security
• Collaborate with developers to embed secure-by-design principles and contribute to secure architecture, threat modelling, and secure code reviews
• Own the local response to cyber incidents, ensuring rapid and effective resolution in collaboration with the global CSO team
• Coordinate penetration testing, vulnerability assessments, and dynamic application testing, supporting remediation and ensuring audit readiness
• Support and shape the design of scalable security solutions, contributing to both global and regional CSO services
• Travel occasionally across Europe to collaborate with other business units, ensuring consistent implementation of our security strategy
• Contribute to our “shift-left” approach by automating security testing into CI/CD pipelines
• Deliver technical security consultancy to product and infrastructure teams with clarity and influence

Requirements

• 5+ years of demonstrable experience in IT/network security — ideally within professional or consulting capacity
• 3+ years of experience with penetration testing, vulnerability scanning, red teaming, or application security (web or mobile)
• 2+ years in development, DevOps or DevSecOps environments
• Confident scripting across languages (e.g. Python, PowerShell, JavaScript, Bash)
• Experience conducting security assessments aligned with frameworks such as OWASP, MITRE ATT&CK, (M)ASVS
• Ability to communicate security findings to both technical and non-technical audiences
• Comfortable working cross-functionally across time zones and geographies
• Flexibility and a love for solving the unknown — you don’t shy away from complexity

Nice to haves

• Reverse engineering or exploit development experience
• Contributions to open-source security tools or research
• Experience mentoring junior talent or giving internal workshops

CERTIFICATIONS

(We don’t expect all of these, but two or more would be ideal!)

• Penetration Testing:

CREST CRT, OSCP, OSCE, OSEP, GPEN, eCPT/X, HTB CPTS, OSWP, PNPT

• Red Teaming:

CRTP, CRTO (1/2), CRTE

• Application Security:

BurpSuite Certified Practitioner, OSWE, GWAPT, eWPT

• Mobile Security:

GMOB, EMAPT

• Cloud Security:

CCSP, CARTP, CAWASP, PACSP

• DevSecOps / Security Automation:Hands-on experience with security tools integrated into CI/CD pipelines

***Background Check Requirement
Due to the sensitive nature of this role and the access it entails to confidential systems and data, the successful candidate may be required to submit a Führungszeugnis (Certificate of Good Conduct) issued by the German Federal Office of Justice.

This request will be made only once a conditional offer of employment has been extended, and it will form part of the final onboarding process.

The certificate will be used solely for assessing suitability for the role, and in accordance with applicable data protection laws (GDPR & BDSG). It will not be retained beyond what is necessary and access will be restricted to designated HR personnel.

Benefits

A sneak peek into your benefits:

• Additional health insurance coverage for 900 EUR per year
• 30 days of remote work allowance
• Up to 33 days annual vacation allowance (28 base days, + yearly tenure bonus up to 3 days, + 2 days for using the Humanoo app!)
• Subsidy for your UrbanSportsClub membership
• 70 EUR monthly cashback to cover daily expenses
• 500 EUR yearly personal learning and development budget
• Self-development days allowance (workshops, conferences, training sessions etc.)
• Team events and company events
• Referral bonus for employees
• Corporate benefits
• Humanoo for Humanoos!
• Employee Assistance Programme (EAP) for mental well-being

Please note: our offices close over the Christmas and New Year period for approximately two weeks. We gift the 24th and 31st December as extra vacation days and any additional non-public holiday days during this time will be taken from your annual leave.

What we stand for:

• Customer First: We create meaningful, human connections to improve outcomes for our customers and our communities, powered by our world-leading technology, collective ingenuity and culture of caring.
• Embrace Change: We challenge the status quo, experimenting and taking calculated risks to differentiate ourselves from our peers and deliver consistently leading results.
• Grow Together: We welcome everyone to bring their whole self to work, appreciating our uniqueness and always standing together as one team.

HUMANOO is an automated Digital Corporate Wellness Solution for corporations and insurance worldwide that helps people lead healthier lives.

Humanoo helps users improve physical and mental health by offering customised, on-demand programmes for fitness, yoga, mindfulness, sleep, and nutrition.

Humanoo's pioneering vision allows users to be rewarded for health activity through monetary and non-monetary rewards, leading to sustained engagement and study-based health improvement.

More than 1500 companies in over 10 countries are already successfully using Humanoo to make their employees and clients healthier and more productive. TK, Coca-Cola, Axel Springer, Korian, Nürnberger Versicherung, and CSS are only some companies using Humanoo.