Senior Security Engineer

Stott and May Inc.; Deutschland; Remote; EUR 108,000 - 132,000; Full time

Benefits offered by this job

ESOP

Remote work in Germany

Job summary

Stott and May Inc. is seeking a Senior Security & Compliance Engineer to strengthen its security function within a cloud-native environment in Germany.

The role is hands-on, spanning security controls, compliance programs, and DevSecOps, with direct access to the Head of Security. You will work closely with engineering teams to identify risks and drive remediation, while helping meet security requirements for enterprise and public-sector customers.

Qualifications

• Around 5–10 years of relevant security experience.
• Hands-on experience with ISO 27001 and/or BSI IT-Grundschutz.
• Broad knowledge across cloud, application and infrastructure security.
• Comfortable working hands-on with engineering teams.
• Fluent German and good working English.

Responsibilities

• Implement and improve security controls across a cloud-native environment.
• Support compliance initiatives across ISO 27001, BSI IT-Grundschutz and BSI C5.
• Work across application security, vulnerability management, cloud security and DevSecOps.
• Collaborate with engineering teams to identify risks and drive remediation.
• Help meet the security requirements of enterprise and public-sector customers.
• Take ownership of initiatives from identifying the problem through to implementation.

Skills

Security engineering

Cloud security

DevSecOps

Vulnerability management

ISO 27001

BSI IT-Grundschutz

Job description

Senior Security & Compliance Engineer | Germany | Up to €120k + ESOP

I’m working with a growing cloud infrastructure business looking to hire a Senior Security & Compliance Engineer to strengthen its security function.

Following success in securing major government and public-sector tenders, the business is investing in its security capabilities to meet increasingly demanding enterprise requirements, giving you the opportunity to play a key role in securing high-profile contracts and shaping the platform as it scales.

This is a broad, hands-on role working closely with the Head of Security. The focus is on making security and compliance work in practice, across both the platform and the wider business.

The role

• Implement and improve security controls across a cloud-native environment
• Support compliance initiatives across ISO 27001, BSI IT-Grundschutz and BSI C5
• Work across application security, vulnerability management, cloud security and DevSecOps
• Collaborate with engineering teams to identify risks and drive remediation
• Help meet the security requirements of enterprise and public-sector customers
• Take ownership of initiatives from identifying the problem through to implementation

What I’m looking for

• Around 5–10 years of relevant security experience
• Practical experience with ISO 27001 and/or BSI IT-Grundschutz
• Broad technical knowledge across cloud, application and infrastructure security
• Someone comfortable working hands-on with engineering teams, not just advising on compliance
• Fluent German and good working English

The package

• Up to €120,000 base salary + ESOP
• Remote within Germany
• Occasional travel to Munich or Karlsruhe
• Direct access to the Head of Security and scope to shape how security develops

This could suit someone who wants a mix of technical security and compliance, with real ownership in a growing product environment.

#CyberSecurity #CloudSecurity #DevSecOps #InformationSecurity #Hiring