Senior Security Engineer (F/M/D)

NavVis; Deutschland; On-site; EUR 75,000 - 120,000; Full time

Benefits offered by this job

30 days paid time off

Wellpass fitness subsidy

Deutschlandticket travel subsidy

Flexible hours; hybrid work

Visa & relocation support

JobRad bike leasing

Competitive compensation

Referral bonus up to 4000 EUR

Language classes support

Job summary

NavVis seeks a hands-on security operations lead to own incident response across SaaS and hybrid IT, collaborating with Service Delivery and Cloud Infrastructure Engineering. This role combines threat detection with practical improvements to security posture.

You will drive threat detection, vulnerability management, and ISO 27001/SOC 2 audits, building automated playbooks while communicating clearly with both technical and non-technical stakeholders.

Qualifications

• Hands-on security operations, incident response, and forensic analysis in SaaS and hybrid IT.
• Deep knowledge of Microsoft Defender, Entra ID, email security, and endpoint protection.
• Experience leading security topics end-to-end with minimal oversight.
• Clear communicator who explains security to technical and non-technical stakeholders.
• Experience collaborating with infrastructure teams on network and vulnerability controls.
• Proven ability to drive ISO 27001 or SOC 2 audits end-to-end.
• Bias towards automation over manual work.

Responsibilities

• Lead security incident response and drive continuous improvements.
• Own Microsoft Defender, email security, and phishing protection.
• Strengthen network security with IT Ops: firewalls, VPNs, segmentation.
• Manage vulnerability scanning, remediation, and risk reporting.
• Govern access reviews and enforce least privileges.
• Run ISO 27001 & SOC 2 audits and coordinate via Vanta.
• Support business continuity and disaster recovery planning.
• Assess vendor security and monitor SaaS risk.
• Research emerging threats and refine security playbooks.

Skills

Security operations

Incident response

Forensic analysis

Microsoft Defender

Entra ID

Email security

Endpoint protection

Audits (ISO 27001/SOC 2)

Automation

Tools

Microsoft Defender

Entra ID

Email security tools

Job description

THE OPPORTUNITY

Join our Global IT Infrastructure team and take ownership of security operations that protect NavVis worldwide. You’ll lead detection and incident response across corporate IT and SaaS environments, working hand‑in‑hand with Service Delivery, Cloud Infrastructure Engineering, and our Cloud Infrastructure Engineer. This is a hands‑on role where you’ll make real impact—investigating threats, driving improvements, and shaping security processes. No ticket forwarding, no passive coordination—just meaningful responsibility and the chance to build a security posture you can be proud of.

HOW YOU WILL MAKE AN IMPACT

• Lead security incident response and drive continuous improvements.
• Own Microsoft Defender, email security, and phishing protection.
• Strengthen network security with IT Ops: firewalls, VPNs, segmentation.
• Manage vulnerability scanning, remediation, and risk reporting.
• Govern access reviews and enforce least privileges.
• Run ISO 27001 & SOC 2 audits and coordinate via Vanta.
• Support business continuity and disaster recovery planning.
• Assess vendor security and monitor SaaS risk.
• Research emerging threats and refine security playbooks.

WHAT WILL HELP YOU SUCCEED IN THE ROLE

• You have strong, hands‑on experience across security operations, incident response, and forensic analysis in SaaS and hybrid IT environments.
• You bring deep practical knowledge of Microsoft Defender, Entra ID, email security, identity‑related incidents, and endpoint protection.
• You are comfortable managing security topics from start to finish with minimal oversight.
• You are a strong communicator who can break down complex security topics in simple actionable terms to both technical and non‑technical stakeholders.
• You are experienced working with infrastructure teams to operate network and vulnerability security controls.
• You demonstrate a proven ability to drive ISO 27001 OR SOC 2 audits end‑to‑end.
• You bring pragmatic approaches to improving processes with a bias towards automation over manual work.

HOW WE WILL KEEP YOU SMILING

• 30 days of paid time off per year.
• Affordable access to a vast network of fitness and wellness facilities through EGYM Wellpass subsidy.
• Deutschlandticket subsidy to support sustainable travel using public transport.
• Flexible working hours and a hybrid work setup.
• Full visa and relocation support for international candidates.
• An attractive bike leasing model through JobRad.
• A competitive compensation package.
• Up to 4000 EUR employee referral bonus.
• Financial support for local language classes.

We derive our strength from our diversity. NavVis' unwavering commitment to fostering an inclusive and diverse workplace has laid the foundation for our incredible growth. We thrive on the collective strength of our people who come from diverse backgrounds. We respect and value every experience associated with race, gender identity, sexual orientation, nationality, religion and disability. We do not discriminate on the basis of any of these, or other identities, and strongly encourage everyone to apply.

If you need assistance at any stage of the recruiting process due to a disability, please reach out to your recruiting partner(s) for this position.