Senior Security Engineer

Gelato; Deutschland; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A global leader in on-demand production is seeking a Senior Security Engineer in Germany. This role involves collaborating with various teams to enhance security strategies and conduct vulnerability assessments. The ideal candidate will have over 7 years of cybersecurity experience, including hands-on incident response. Key responsibilities include promoting security awareness, managing incidents, and developing scalable solutions using AI technologies. Join a passionate team dedicated to innovative and secure technology solutions.

Qualifikationen

• 7+ years of experience in cybersecurity with hands-on incident response.
• Proven skills in managing security incidents and risks.
• Experience in designing secure AWS cloud architectures.

Aufgaben

• Develop innovative solutions to enhance the security strategy.
• Conduct vulnerability scans and penetration testing.
• Educate employees on security best practices.

Kenntnisse

Incident response

Vulnerability management

Cloud security

Scripting (Python, PowerShell, Bash)

Threat detection

Ausbildung

Master's degree in Computer Science or related field

CISSP certification

AWS Security Specialty

Tools

SIEM

WAF

IAM

SOAR

EDR

Jobbeschreibung

About Gelato

Gelato has created the world's largest global network for on-demand production of custom products - from t-shirts and mugs to books and wall art. We empower a new generation of ecommerce entrepreneurs to share their creativity worldwide while embracing local, sustainable production. By producing locally and perfectly matching supply with demand, we eliminate waste and reduce carbon emissions.

At Gelato, we don't own production facilities - we build the software that connects them. With over 140 production partners in 32 countries, our network can deliver custom products to five billion people in just 72 hours. It's smarter, faster, and greener.

With GelatoConnect, our SaaS platform, we're driving innovation in print production. GelatoConnect simplifies operations for print producers by automating procurement, workflows, and logistics into one seamless system. By boosting efficiency and cutting costs, it helps businesses scale to meet market demands. With GelatoConnect, we're reshaping the print industry to be more efficient, sustainable, and profitable.

The position

Following our global expansion, we are looking for a passionate Senior Security Engineer to join our effort of protecting Gelato and, most importantly, our customer's data.

We are looking for a person who wants to make the Gelato platform safer for millions of users around the world. We'd love to talk to you if you're a talented individual who is passionate about finding security weaknesses and crafting scalable and usable solutions. We are enablers who make it easier for engineers to create secure‑by‑design services, not blockers.

Reporting directly to the Head of Information Security, you will work closely with Product Managers and Tech Engineers.

What you'll be doing

• Collaborate closely with Product Design and Software Engineering to align with security features, roadmaps and ensure timely delivery.
• Identify vulnerabilities and develop innovative, scalable solutions to enhance our defense‑in‑depth strategy. This involves conducting vulnerability scans and penetration testing.
• Promote a security‑conscious culture by educating all Gelato employees on security best practices.
• Monitor and respond to security incidents, including the regular analysis of potential threats.
• Identify, document and measure security risk, effectively communicate these risks to senior leadership, and influence remediation plans.
• Participate in an on‑call rotation to provide timely response and escalation for security incidents outside of business hours, ensuring continuous protection and monitoring coverage.
• Develop, tune, and maintain security monitoring and detection systems (IAM, SIEM, SOAR, WAF, EDR) to identify suspicious activity, anomalies, and potential threats.
• Manage the full vulnerability management lifecycle, including identification, prioritisation, remediation tracking, and verification of closure.
• Contribute to security architecture reviews and the design, deployment, and hardening of security controls across infrastructure, cloud, and applications.
• Introduce automation and orchestration to streamline detection, response, and compliance activities through scripting (Python, PowerShell, Bash).
• Support governance and compliance activities such as audit preparation, evidence collection, and control testing against frameworks like ISO27001, SOC 2, NIST CSF, and CIS Controls.
• Hands‑on experience designing and implementing secure AWS cloud architectures.
• Integrate AI and LLM technologies into daily security workflows to automate repetitive analysis, improve threat detection, and support rapid incident response.

Who you are

• A degree (Master's is a plus) in Computer Science, a similar technical field of study, or equivalent practical experience
• Broader certification coverage, including CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CCSP, or equivalent advanced credentials.
• 7+ years of experience in cybersecurity, with at least 3 years in hands‑on incident response, detection, or vulnerability management roles.
• Proven experience with SIEM, WAF, IAM, SOAR, EDR, and vulnerability management tools.
• Cloud security specialisation, ideally with certifications such as AWS Security Specialty
• Demonstrated expertise in incident response, including investigation, containment, and coordination across cross‑functional teams.
• Embraces an AI‑first mindset, leveraging AI and LLM tools to drive efficiency and innovation in daily work.
• Strong crisis management and communication skills, able to remain composed under pressure and communicate clearly with both technical and non‑technical stakeholders.
• Good understanding of implementation requirements for ISO27001 and/or SOC2.
• Strong practical automation and scripting capabilities using Python, PowerShell, or Bash to enhance detection and response efficiency.
• Experience designing and implementing production services, APIs, or security‑specific libraries.
• Familiarity with cloud solutions, including AWS and GCP, and prior experience with tools like Cloudflare, ELK stack, and Burpsuite Professional, as well as scripting and programming skills, are required.
• Strong strategic thinking, planning, and organisational skills.
• Fluency in English with excellent verbal and written communication abilities is a mandatory requirement.

What it's like to work at Gelato

We are a customer‑obsessed team with the ambition to change the world by connecting technology to the printing industry and making it much more sustainable. Everyone who joins our team must feel genuinely intrigued and motivated by our mission. We expect a lot. We are a driven team with big goals, so we seek individuals who are genuinely passionate about their work and possess an entrepreneurial spirit. Our culture is unique and we live by our values, so it's worth learning more about our culture and how we work before presenting your application.

At Gelato, we pride ourselves on our global presence with 14 offices worldwide, fostering a dynamic and diverse work environment. Rooted in a culture that values collaboration, creativity, and camaraderie, we actively cultivate a company culture that thrives on shared experiences. We encourage team members to embrace this culture by working from our inspiring office spaces at least three days a week, allowing for meaningful connections and collective growth.

Lastly, we ask that you please upload your CV in English, regardless of which country you are applying from.