Senior Security Engineer

Jobgether; Deutschland; Vor Ort; EUR 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Remote in Europe

Distributed collaboration

Technical ownership

Cloud & automation tech

Mentor teammates

Occasional travel

Equal opportunity

Gaming/esports context

Zusammenfassung

Jobgether, acting on behalf of a partner, seeks a Senior Security Engineer based in Germany to shape security across a large-scale digital platform. You will design security architectures, implement automated controls, and drive threat detection, incident response, and compliance across multi-cloud environments.

You will mentor engineers, establish security standards, and own end-to-end vulnerability management while collaborating with engineering and business teams to embed security by design.

Qualifikationen

• Extensive experience in information security engineering and scale.
• Translate security policy into enforceable technical standards.
• Expert knowledge of cloud platforms (AWS and/or GCP) and secure multi-tenant design.
• Deep Kubernetes, cloud-native security, and IaC (Terraform / CloudFormation) expertise.
• Proficient scripting/programming to build security tooling and automate SecOps.
• Experience with SIEM, SOAR, and EDR architectures and optimising detection pipelines.
• Led DevSecOps initiatives within CI/CD without slowing development velocity.
• Familiarity with ISO 27001, SOC 2, NIST; audit readiness and data protection.
• Strong architectural thinking, analytical skills, and stakeholder management.

Aufgaben

• Architect and oversee security monitoring and threat detection across systems.
• Design automated detection logic for complex attack patterns and alerts.
• Escalate and lead high-impact security incidents with systemic solutions.
• Integrate security into the SDLC with Security-as-Code in CI/CD pipelines.
• Set security gates and guide on architectural weaknesses and vulnerabilities.
• Own end-to-end vulnerability management across infra and apps.
• Lead cross-functional programs and engagements with testers and bug bounty researchers.
• Build and optimise security infrastructure: EDR, Zero Trust, IAM, DLP, SOAR.
• Drive automation to reduce manual security operations across multi-clouds.
• Lead incident responses, containment, eradication, and post-incident reviews.
• Perform root-cause analyses and inform long-term security roadmaps.
• Lead audits and assurance activities aligning with standards and regulations.
• Define standards for validating security controls and compliance readiness.
• Act as strategic security advisor for initiatives involving vendors and tech choices.
• Establish documentation, runbooks, and operational security practices.
• Mentor junior and mid-level engineers to raise team capabilities.

Kenntnisse

Security architecture

Threat detection

Incident response

DevSecOps

Security automation

Leadership

Communication

Cloud security

Tools

Terraform

CloudFormation

Kubernetes

SAST

DAST

SCA

EDR

SIEM

SOAR

Python

Jobbeschreibung

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Germany.

As a Senior Security Engineer, you’ll help shape and strengthen security across a large-scale digital platform and a globally distributed technology ecosystem.

You’ll act as a technical authority, designing security architectures, engineering resilient controls, and driving automation across cloud and infrastructure environments.

The role spans threat detection, vulnerability management, DevSecOps, incident response, compliance, and security assurance.

You’ll work closely with engineering and business teams to embed security by design into new technologies, products, and strategic initiatives.

Your expertise will directly influence how security controls are architected, deployed, monitored, and continuously improved.

You’ll also provide technical leadership and mentorship, helping establish standards, documentation, and engineering practices across the security function.

This is an opportunity for a highly experienced security engineer to take ownership of high-impact initiatives in a fast-moving, technology-driven environment.

Accountabilities

• Architect and oversee advanced security monitoring and threat detection frameworks across diverse systems and log sources.
• Design automated detection logic capable of identifying complex attack patterns and improving the quality and accuracy of security alerts.
• Serve as a senior escalation point for high-impact security incidents and recurring security issues, engineering systemic solutions rather than relying solely on manual remediation.
• Lead the integration of security into the software development lifecycle, including Security-as-Code and automated SAST, DAST, and SCA capabilities within CI/CD pipelines.
• Partner with engineering leaders to establish appropriate security gates and provide expert guidance on complex architectural weaknesses and critical vulnerabilities.
• Own the end‑to‑end vulnerability management strategy across infrastructure and applications, prioritizing remediation according to business risk and exploitability.
• Lead cross‑functional initiatives to address systemic security weaknesses and coordinate technical relationships with external penetration testers and bug bounty researchers.
• Design, implement, and optimize security infrastructure including EDR, Zero Trust, IAM, DLP, and security orchestration and automation capabilities.
• Drive SOAR and other automation initiatives to reduce manual security operations and ensure consistent enforcement of security controls across multi‑cloud environments.
• Lead the technical response to critical security incidents, coordinating containment, eradication, recovery, communications, and post‑incident activities.
• Conduct detailed root‑cause analyses and translate findings into long‑term engineering roadmaps that reduce the likelihood of recurring incidents.
• Lead security audits, maturity assessments, and assurance activities while ensuring technical environments align with applicable standards and regulations.
• Define technical standards for validating the effectiveness of security controls and supporting compliance with frameworks such as ISO 27001.
• Act as a strategic security advisor for major business and technology initiatives, assessing new technologies and third‑party vendors through a Security‑by‑Design approach.
• Establish standards for security procedures, runbooks, technical documentation, and operational practices.
• Mentor junior and mid‑level security engineers and help raise the team’s overall technical capabilities and consistency.

Requirements

• Extensive professional experience in Information Security Engineering, with a proven track record of architecting and deploying resilient security systems at scale.
• Strong ability to translate high‑level security policies into practical, enforceable technical standards and drive security initiatives across multiple departments.
• Expert‑level knowledge of major cloud platforms, particularly AWS and/or GCP, including secure multi‑tenant architecture and deep security configuration assessment.
• Deep expertise in cloud‑native and container security, particularly Kubernetes.
• Advanced Infrastructure‑as‑Code experience with technologies such as Terraform and/or CloudFormation, including the ability to create automated security guardrails for compliant deployments.
• Strong scripting and programming capabilities using modern, actively supported programming languages to develop security tooling, automate SecOps processes, and implement sophisticated detection logic.
• Proven experience architecting and optimizing enterprise security technologies such as SIEM, SOAR, and EDR.
• Strong understanding of detection engineering, alert tuning, security monitoring, and building high‑fidelity detection pipelines while minimizing operational noise.
• Demonstrated experience leading DevSecOps initiatives and embedding security into complex CI/CD environments without unnecessarily slowing development velocity.
• Comprehensive knowledge of security and compliance frameworks including ISO 27001, SOC 2, and NIST.
• Understanding of international data protection and security regulations, with practical experience preparing for and supporting security audits.
• Strong incident response and digital forensics capabilities, with experience leading technical responses to critical security events.
• Ability to turn complex technical findings and incident root causes into actionable, long‑term security strategies.
• Strong architectural thinking, analytical skills, and technical judgment.
• Excellent communication and stakeholder‑management skills, with the ability to influence both technical and non‑technical audiences.
• Strong leadership and mentoring capabilities, with a willingness to establish standards and raise engineering quality across the wider team.
• Comfortable operating in a fast‑paced, distributed environment and taking ownership of high‑impact security initiatives.
• Willingness to travel occasionally for team gatherings or specific partner engagements, with travel expected to remain limited.

Benefits

• Remote working opportunity within Europe.
• Flexible environment designed to support distributed collaboration.
• Opportunity to work on security challenges across a large‑scale digital platform and global technology ecosystem.
• High level of technical ownership and influence over enterprise security architecture and engineering standards.
• Exposure to modern cloud, container, infrastructure automation, DevSecOps, detection, and incident response technologies.
• Opportunity to shape security strategy and implement automation across multi‑cloud environments.
• Collaborative environment with opportunities to mentor and support other security professionals.
• Opportunity to contribute to high‑impact security initiatives spanning engineering, infrastructure, compliance, and business operations.
• Occasional travel opportunities for team gatherings and selected partner engagements.
• Inclusive workplace committed to equal opportunity and fair employment practices.
• Opportunity to work in a technology‑driven environment connected to global gaming and esports communities.