Senior IT Security Engineer

EMnify GmbH; Berlin; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

EMnify GmbH is seeking a Senior IT Security Engineer to strengthen our internal security posture. You will design security controls for cloud infrastructure, endpoints, identities and data, and lead incident response across the organization.

You will drive security maturity by monitoring signals, investigating incidents, and delivering awareness training. Collaboration with IT, Engineering, HR and Legal is essential to embed security into business processes.

Qualifications

• Several years of experience in corporate or information security engineering.
• Able to design and implement security controls in a business environment.
• Experience with incident response and handling sensitive internal matters.

Responsabilités

• Design, implement, and improve security controls for cloud, endpoints, identities and data.
• Lead incident response activities including containment, root-cause analysis, remediation, and lessons learned.
• Monitor security signals and investigate potential breaches, misuse, and incidents.
• Deliver security awareness training, education, and communications for employees.
• Partner with IT, Engineering, HR, Legal, and other teams to embed security into processes.

Connaissances

Security engineering

Incident response

Security awareness

Vulnerability management

Risk assessment

IAM/Access control

Cloud security

Communication

Formation

Bachelor's or higher in CS/CISSP preferred

Outils

Security monitoring tools

Description du poste

• We are looking for a Senior IT Security Engineer to strengthen our internal security posture. In this role, you will manage and improve our security infrastructure, build a culture of security awareness across the organization, and investigate anomalous or suspicious activity and potential security incidents
• Design, implement, and continuously improve security controls for cloud infrastructure, endpoints, identities and data
• Maintain security standards, policies, procedures, and technical safeguards
• Monitor internal security signals and investigate potential breaches, misuse, and other security incidents
• Lead incident response activities, including containment, root-cause analysis, remediation, and lessons learned
• Deliver security awareness training, education, and communications for employees
• Partner with the rest of IT, Engineering, HR, Legal, and other teams to embed security into business processes and projects
• Support vulnerability management, access reviews, risk assessments, and audit activities
• Evaluate security tools and technologies and drive practical improvements to the organization’s security maturity

• Human-first approach to security awareness, and the ability to communicate security topics clearly to both technical and non-technical audiences
• Real-life experience investigating security incidents and handling sensitive internal matters with discretion
• Experience with security frameworks, risk management, and relevant compliance requirements
• Hands-on experience designing and implementing security controls in a business environment
• Several years of experience in corporate, internal, or information security engineering
• Strong knowledge of identity and access management (including conditional access policies), endpoint security, cloud security, network security, and security monitoring
• Strong analytical, problem-solving, and communication skills, with a pragmatic and collaborative approach