Senior Security Engineer (m/f/d)

Yoummday GmbH; München; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

30 days vacation

Job lunch allowance (€69/mo)

Givve card (€50/mo)

Wellpass membership

Corporate Benefits discounts

JobRad leasing

Pension contributions

Great team & company events

Zusammenfassung

Yoummday GmbH is seeking a Senior Security Engineer to own cloud security architecture, implement guardrails in Terraform, and drive detection and vulnerability programs across a hybrid environment. You will collaborate with a small, empowered team and apply hands-on engineering to secure identity, endpoints, apps, and AI-related risks.

The role emphasizes practical impact, cross-team ownership, and direct contribution to security operations with frequent collaboration in English (German a

Qualifikationen

• Minimum five years in security engineering and hands-on Azure security experience.
• Azure security expertise with AZ-500 or equivalent practical knowledge; SC-100, CISSP, CCSP, or Security+ are a plus.
• Strong Terraform code literacy and security automation experience; Python, Django, PowerShell are a plus.
• Practical knowledge of Entra ID, RBAC, and PIM; solid network security and SIEM fundamentals.
• Experience with traditional or AI-assisted pentesting and vulnerability management tools like Tenable or Defender VM.

Aufgaben

• Own security architecture and guardrails across the Azure environment, including Defender for Cloud, Sentinel, and Log Analytics.
• Develop and continually improve detections in collaboration with the security team.
• Advance vulnerability management across hybrid cloud and on-premises systems during migration.
• Contribute security expertise beyond cloud: identity, endpoint security, app security, incident response, and AI risk management.
• Build and maintain internal security tooling and AI-assisted testing through Claude Code, promoting scalable processes.

Kenntnisse

Security architecture

Terraform

Azure security

Detection engineering

Vulnerability management

AI-assisted engineering

Hands-on engineering

Team collaboration

English communication

German language

Tools

Terraform

Azure Defender

Microsoft Sentinel

Log Analytics

Tenable

Defender Vulnerability Management

Entra ID

PIM

SIEM

AI tooling (Claude Code)

Jobbeschreibung

Your mission

Do you want to do more than just write security concepts - and put your decisions into practice directly? Do you see cloud security not as a compliance checklist, but as the combination of threat modeling, Infrastructure as Code, and genuine hands-on engineering? Then we are looking for you to join our CISO team as a Senior Security Engineer (m/f/d) in ahybrid working model in Munich, Berlin or Halle (Saale). You will join a three-person team where responsibility is genuinely shared: no ticket queues and no “that’s not my area.” We plan together, cover for one another, and usually implement and operate the security controls we design ourselves. This means you will see the impact of your work immediately - not at some point in the distant future.

Your Responsibilities

• Security Architecture & Cloud Guardrails: You will take technical ownership of the security architecture and controls across our Azure environment - from Defender for Cloud and Microsoft Sentinel to Log Analytics. You will build and maintain the corresponding guardrails directly in Terraform.
• Detection Engineering: You will develop and continuously improve our detections in close collaboration with our Security Analyst, who is responsible for day-to-day SIEM monitoring and triage. You will work as a well-coordinated team rather than in separate silos.
• Vulnerability Management: You will further develop our vulnerability management and monitoring across a hybrid environment. This includes our growing cloud landscape as well as the existing on-premises stack for as long as the migration is ongoing.
• Security Beyond the Cloud: You will contribute your expertise beyond cloud security, including identity, endpoint security, application security, incident response, and AI. Using your security engineering skills, you will, for example, develop tooling for AI-assisted penetration testing within our team and translate it into practical, scalable processes.
• AI-Assisted Engineering: You will use tools such as Claude Code to build and maintain internal security tools and automations. At the same time, you will help us identify AI-specific risks early—from the secure use of AI coding assistants to prompt injection.

Your skillset

• Azure Security & Certifications:You have at least five years of experience in security engineering and several years of hands‑on experience implementing Azure security. You hold an AZ-500 certification or have equivalent practical expertise. SC-100, CISSP, CCSP, or Security+ certifications are a plus.
• Infrastructure & Automation:You can confidently read, write, and further develop security‑related Terraform code. Experience with Python, Django, PowerShell, or AI‑assisted development is a plus.
• Identity & Detection:You have practical experience with Entra ID, RBAC, and PIM, as well as solid knowledge of network security, SIEM, and detection engineering.
• Offensive Security & Vulnerability Management:Ideally, you have experience with traditional or AI‑assisted penetration testing and with tools such as Tenable or Microsoft Defender Vulnerability Management.
• Hands‑On Mindset: You do not just design security controls -you implement and operate them in practice. When you identify a problem, you do not wait for a ticket; you take ownership and develop a solution.
• Collaboration & Communication:You share knowledge and responsibility and work closely with the team on areas of joint ownership. You communicate confidently and professionally in English. German is a plus, but not a requirement.

Experience with an ongoing cloud migration and AI/LLM security is welcome, but not essential. What matters to us is what you can genuinely do - substance beats buzzword bingo.

Your winning deal

• Yourbenefits: In addition to 30daysofvacation,wealsoofferyouajoblunchallowance (€69 per month), a“Givve”card(topped up with €50 per month) or a subsidized membership with Wellpass, discounts via“Corporate Benefits”,theoptionofleasing aJobRad, pensioncontributions (occupational pension & VL) and greatteamand companyevents.
• Yourworkplace:Youwillworkin aflexible,hybridmodelfromoneofourdog-friendlyandmodernofficesandwillhavetheopportunitytodo “work from abroad”withintheEUfor2weeksayear(*onlyappliestoemployeeswithan EUpassport)
• Yourfootprint:A position in aprofitable companywhere you have thefreedomandconfidenceto help shape it and work with us on the“future of work”.
• Thevalues:Wescorehighlywithanopen,authenticcultureand ahigh-performingandhumorousteamthatisalreadylookingforwardtomakingbolddecisionswithyouandbreakingnewgroundthatwillleadustosustainablesuccess.
• Youropportunity:Fromdayone,youwillhavetheopportunitytotakeonresponsibility,driveinnovationanddevelopthecompanyandyourselftogetherwithateamofexperts.