Senior IT Security Specialist (m/f/d)

ProSiebenSat.1 Media SE; Berlin; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

AI training & development programs

Hybrid work model NWOW

30 days vacation

International mobility (EU) up to 30d

Partner discounts

Childcare support

Mental Health Days

Food services & campus facilities

Open dress code & culture

Employee networks

Job summary

ProSiebenSat.1 Tech & Services GmbH is seeking an experienced security professional to drive vulnerability management, offensive testing, and active security operations. You will integrate across identity, endpoint, network, and cloud domains and support group-wide security improvements.

The role emphasizes collaboration with infrastructure, DevOps, cloud teams and the Information Security Office, while participating in on-call rotations and strategic security initiatives.

Qualifications

• Several years of IT or information security experience with focus on vulnerability management and offensive security.
• Background in Unix or Windows administration, networking, or software development.
• Hands-on experience with vulnerability scanning tools, penetration-testing frameworks, and MITRE ATT&CK.
• Experience with Microsoft Sentinel, Datadog, and CrowdStrike; familiarity with CVSS- and SLA-driven remediation.
• Willing to join an on-call rotation and coordinate with internal/external partners.

Responsibilities

• Plan and coordinate vulnerability tools, scans, and offensive security testing; classify findings, lead weekly triage meetings, enforce SLAs, and escalate breaches.
• Assess severity, exploitability, and exposure of findings to help teams prioritize remediation.
• Triage SIEM alerts across identity, endpoint, network, and cloud; define suppression and whitelisting rules with the SOC.
• Act as a technical incident responder; participate in the on-call rotation.
• Advise specialist departments and subsidiaries on infrastructure, DevOps, and cloud security; coordinate technical projects between teams, IT management, vendors, and the Information Security Office.
• Turn group policies into practical SecOps guidance; maintain automation and AI-assisted tooling.

Skills

Vulnerability management

Offensive security

Unix admin

Windows admin

Networking

MITRE ATT&CK

SIEM tools

CrowdStrike

Tools

Microsoft Sentinel

Datadog

CrowdStrike

Job description

ProSiebenSat.1 Tech & Services GmbH is a fully owned subsidiary of ProSiebenSat.1 Media SE. It incorporates all subjects regarding Enterprise IT and is responsible for operations and continued development of P7S1-internal applications as well as of IT infrastructure. ProSiebenSat.1 Tech & Services optimizes the technical processes throughout the group, permanently refines the system architecture and thus provides the P7S1-employees a technologically state-of-the-art working environment.

As a signatory of the Diversity Charter, ProSiebenSat.1 is committed to a working environment free of prejudice and actively promotes diversity and equal opportunities among employees.

You have a disability and would like to apply? Then you are very welcome.

We know that we are not entirely accessible yet, but we are working on it. Let's talk about how we can eliminate any barrier together and find an individual solution if needed.

Although we refer to one gender in the text, all genders may be implied.

Help protect a fast-moving media business by turning security signals into decisive action. You'll combine hands-on monitoring and incident response with proactive vulnerability management, offensive testing, and technical consulting. Working across infrastructure, DevOps, cloud, and specialist teams, you'll shape practical security improvements and strengthen resilience from project design through operations.

In this position, you work within our hybrid model "Highly Remote".

What you can expect in this role

• You plan and coordinate vulnerability tools, scans, and offensive security testing, classify findings, lead weekly triage meetings, enforce SLAs, and elevate breaches
• Using your technical judgment, you assess the severity, exploitability, and exposure of findings to help teams prioritize remediation
• Across identity, endpoint, network, and cloud sources, you triage SIEM alerts, define suppression and whitelisting rules, and work closely with the SOC
• As a technical incident responder, you help handle security incidents and participate in the on-call rotation
• From the design phase onward, you advise specialist departments and subsidiaries on infrastructure, DevOps, and cloud security, while coordinating technical projects between project teams, IT management, vendors, and the Information Security Office
• Together with the InfoSec Office, you turn group policies into practical guidance for departments and help maintain SecOps infrastructure, automation, and AI-assisted tooling

• You have several years of experience in IT or information security, with a focus on vulnerability management and offensive security
• With a background in Unix or Windows administration, networking, or software development, you understand IT architecture and how systems work together
• You have hands-on experience with vulnerability scanning tools, penetration-testing frameworks, and MITRE ATT&CK
• You have worked with Microsoft Sentinel and/or Datadog, as well as CrowdStrike, and understand CVSS- and SLA-driven remediation, including suppression and whitelisting logic
• You work cooperatively and with a solution-oriented mindset, represent your department confidently with internal and external partners, and are willing to join an on-call rotation

• Take advantage of our wide range of training and development opportunities at the ProSiebenSat.1 Academy
• We advance your AI skills through internal training and our vibrant AI community. For us AI is not a future topic, but already shapes our daily work as an integral part of the value chain - from content creation to distribution
• Benefit from a great flexibility and the possibility of mobile working thanks to our hybrid working model "NWOW" (New Ways of Working) as well as 30 days of vacation per year
• Make use of our international mobile working agreement from 25 EU countries and Switzerland - for up to 30 days within twelve months
• Benefit from a highly discounted membership at EGYM Wellpass, a free Joyn Plus+ subscription as well as numerous other special discounts of our partners
• Receive support in all situations of life, e.g. with our campus-owned daycare center, a childcare allowance or the BUK Family Service with free advice, for example on the topic of care. With our regular "Mental Health Days", we also send a clear signal for more awareness on the topic of mental health in everyday work life
• Use our wide range of campus services at our headquarter including a canteen with fair prices, different coffee bars or our massage service
• Enjoy an open corporate culture without a dress code
• Join our P7S1 employee networks and get engaged in a topic you are passionate about, e.g. PROUD, Greenteam, fempowerment, language buddies