Senior Cyber Security Engineer (Application & Cloud Security) (fmd) Berlin based

Humanoo; Berlin; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A health tech company in Berlin is looking for a Cybersecurity Lead to spearhead security practices across Europe. The ideal candidate will have at least five years' experience in IT security, be able to communicate effectively with both technical and non-technical teams, and possess strong scripting skills. This is an exciting opportunity to collaborate with a global team of top professionals to secure health-tech products at a large scale. Hybrid work options are available.

Leistungen

Additional health insurance coverage (900 EUR/year)

30 days of remote work allowance

Up to 33 days annual vacation

Subsidy for UrbanSportsClub membership

500 EUR yearly personal development budget

Employee Assistance Programme (EAP)

Qualifikationen

• 5 years of experience in IT/network security.
• 3 years in penetration testing or application security.
• 2 years in DevOps or DevSecOps environments.

Aufgaben

• Lead cybersecurity for Humanoo and EU region.
• Drive adoption of security services.
• Coordinate penetration testing and vulnerability assessments.
• Deliver security consultancy to product teams.

Kenntnisse

Cybersecurity expertise

Scripting (Python, PowerShell, JavaScript, Bash)

Experience with OWASP and MITRE ATT&CK

Ability to communicate technical findings

Flexibility in solving complex issues

Tools

BurpSuite

CI/CD automation tools

Jobbeschreibung

HELLO THERE! PEOPLE AT HUMANOO ARE HAPPY TO GREET YOU!

Location : Berlin (Hybrid)

Start : ASAP

Employment : Full-time permanent

With a team of 90 people from over 28 nationalities Humanoo a Telus Health company is building a unique holistic platform that makes people healthier. We are ambitious goal-oriented and enjoy creating a positive inclusive atmosphere.

Youll join us as part of TELUS Healths Chief Security Office (TH CSO) a globally recognised mature cyber security organisation protecting healthcare technologies worldwide. This role will empower you to lead and shape security practices across our European business while collaborating with a global team of top cyber professionals and technologists.

Youll act as the cyber security lead for Humanoo and support the broader European region across security services product security design and incident response. This is more than a job its a high-impact mission to secure our health-tech products at global scale.

Tasks

• Be the go-to cybersecurity expert for Humanoo and our EU region reporting to both the CIO (Christophe Klarner) and TELUS Health CSO Director (Kevin Watkins)
• Drive adoption of TH CSO services in vulnerability management incident response detection & monitoring DevSecOps cloud and application security
• Collaborate with developers to embed secure-by-design principles and contribute to secure architecture threat modelling and secure code reviews
• Own the local response to cyber incidents ensuring rapid and effective resolution in collaboration with the global CSO team
• Coordinate penetration testing vulnerability assessments and dynamic application testing supporting remediation and ensuring audit readiness
• Support and shape the design of scalable security solutions contributing to both global and regional CSO services
• Travel occasionally across Europe to collaborate with other business units ensuring consistent implementation of our security strategy
• Contribute to our shift-left approach by automating security testing into CI / CD pipelines
• Deliver technical security consultancy to product and infrastructure teams with clarity and influence

Requirements

• 5 years of demonstrable experience in IT / network security ideally within professional or consulting capacity
• 3 years of experience with penetration testing vulnerability scanning red teaming or application security (web or mobile)
• 2 years in development DevOps or DevSecOps environments
• Confident scripting across languages (e.g. Python PowerShell JavaScript Bash)
• Experience conducting security assessments aligned with frameworks such as OWASP MITRE ATT&CK (M)ASVS
• Ability to communicate security findings to both technical and non-technical audiences
• Comfortable working cross-functionally across time zones and geographies
• Flexibility and a love for solving the unknown you dont shy away from complexity

Nice to haves

• Reverse engineering or exploit development experience
• Contributions to open-source security tools or research
• Experience mentoring junior talent or giving internal workshops

Certifications

• Penetration Testing: CREST CRT OSCP OSCE OSEP GPEN eCPT / X HTB CPTS OSWP PNPT
• Red Teaming: CRTP CRTO (1 / 2) CRTE
• Application Security: BurpSuite Certified Practitioner OSWE GWAPT eWPT
• Mobile Security: GMOB EMAPT
• Cloud Security: CCSP CARTP CAWASP PACSP
• DevSecOps / Security Automation: Hands‑on experience with security tools integrated into CI / CD pipelines

Background Check Requirement

Due to the sensitive nature of this role and the access it entails to confidential systems and data the successful candidate may be required to submit a Führungszeugnis (Certificate of Good Conduct) issued by the German Federal Office of Justice.

This request will be made only once a conditional offer of employment has been extended and it will form part of the final onboarding process.

The certificate will be used solely for assessing suitability for the role and in accordance with applicable data protection laws (GDPR & BDSG). It will not be retained beyond what is necessary and access will be restricted to designated HR personnel.

Benefits

• Additional health insurance coverage for 900 EUR per year
• 30 days of remote work allowance
• Up to 33 days annual vacation allowance (28 base days yearly tenure bonus up to 3 days 2 days for using the Humanoo app!)
• Subsidy for your UrbanSportsClub membership
• 70 EUR monthly cashback to cover daily expenses
• 500 EUR yearly personal learning and development budget
• Self‑development days allowance (workshops conferences training sessions etc.)
• Team events and company events
• Referral bonus for employees
• Corporate benefits
• Humanoo for Humanoos!
• Employee Assistance Programme (EAP) for mental well‑being

Please note: our offices close over the Christmas and New Year period for approximately two weeks. We gift the 24th and 31st December as extra vacation days and any additional non‑public holiday days during this time will be taken from your annual leave.

What we stand for

• Customer First : We create meaningful human connections to improve outcomes for our customers and our communities powered by our world‑leading technology collective ingenuity and culture of caring.
• Embrace Change : We challenge the status quo experimenting and taking calculated risks to differentiate ourselves from our peers and deliver consistently leading results.
• Grow Together : We welcome everyone to bring their whole self to work appreciating our uniqueness and always standing together as one team.

HUMANOO is an automated Digital Corporate Wellness Solution for corporations and insurance worldwide that helps people lead healthier lives.

Humanoo helps users improve physical and mental health by offering customised on‑demand programmes for fitness yoga mindfulness sleep and nutrition.

Humanoos pioneering vision allows users to be rewarded for health activity through monetary and non‑monetary rewards leading to sustained engagement and study‑based health improvement.

More than 1500 companies in over 10 countries are already successfully using Humanoo to make their employees and clients healthier and more productive. TK Coca‑Cola Axel Springer Korian Nürnberger Versicherung and CSS are only some companies using Humanoo.