Senior Security Engineer & ISMS-Verantwortlicher (w/m/d)

Comparus GmbH; Hamburg; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Benefits dieser Stelle

Competitive benefits

Appreciation for commitment

Zusammenfassung

A technology company in Hamburg is seeking a skilled security engineer with extensive experience in cloud and application security, vulnerability management, and DevSecOps. The ideal candidate should have certifications such as ISO 27001 Lead Implementer and experience in regulated industries like finance or banking. Proficiency in German (C1) and professional English is required. A focus on incident response and understanding data loss prevention are also advantageous. Competitive benefits are offered and appreciation for commitment is emphasized.

Qualifikationen

• Several years’ experience in security engineering.
• Practical experience in at least two areas: cloud, application, DevSecOps, etc.
• Experience with regulated sectors, ideally financial or banking.

Kenntnisse

Cloud security

Application security

Vulnerability management

DevSecOps

Network security

German (C1)

Professional English

Ausbildung

ISO 27001 Lead Implementer / Lead Auditor

Tools

AWS

GCP

Kubernetes

Linux

APIs

CI/CD

Jobbeschreibung

You know the kind of conversation.As if that were a decision you make just once. As if architecture and governance were mutually exclusive.Anyone who understands both knows that it is precisely this combination that makes the difference between security that exists on paper – and security that actually works.At COMPARUS, it’s not a question of categorisation. It’s the role.## What it meansNo silos. No pigeonholing. You are the person who understands why an architectural decision becomes an audit issue – and vice versa. That is rare. And that is precisely why we are looking for you.## What we are looking for### **The essentials:*** Several years’ experience in security engineering – cloud, application, network or DevSecOps* Practical experience in at least two of these areas: cloud security, application security, vulnerability management, DevSecOps, network security* ISO 27001 Lead Implementer / Lead Auditor or comparable ISMS experience* Experience with regulated sectors, ideally the financial or banking sector* Tech stack: AWS or GCP, Kubernetes, Linux, APIs, CI/CD* German C1, professional English### **What else we would love to see:*** Knowledge of NIS2, DORA, BSI Basic Protection, EU AI Act* Experience with incident response and forensic investigations* Understanding of data loss prevention in complex platform environmentsBENEFITS & ESSENTIALS## Strong benefits, real appreciation.### Because your commitment counts!