Senior Security Engineer (m/w/d)

AND-E; Ismaning; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

32 days annual leave

Flexible working hours

Home office policy

Company health insurance

Zusammenfassung

AND-E is seeking a skilled IT security engineer to design and mature security architecture across endpoints, identity, network, cloud, and email domains. You will serve as the primary technical advisor to our MSSP, reviewing Splunk Cloud SIEM and Cribl Stream/Edge data pipelines.

Join a collaborative team and help harden controls with Defender for Endpoint, Intune, Proofpoint, Zscaler, Cisco FTD, and FortiGate while leading vulnerability management, threat hunting, and incident response efforts.

Qualifikationen

• Bachelor's degree in IT Security, Cyber Security, Information Systems, or equivalent practical experience.
• 5+ years of experience in IT security engineering, security operations, or infrastructure security.
• Strong grounding in security-by-design, zero-trust, and frameworks such as NIST, ISO 27001, CIS Benchmarks, and MITRE ATT&CK.
• Hands-on familiarity with Microsoft Security Stack, AWS Security Services, Proofpoint, and Zscaler/Cisco/FortiGate.
• Preferred certifications include: CISSP, GIAC (GCIH, GCIA, GCFA, GDSA), Microsoft SC-200/SC-100/AZ-500, AWS Security Specialty, Splunk Enterprise Certified Admin, Cribl Certified Observability Engineer
• Strong English communication skills (German a plus) and proven stakeholder/consulting ability across cross-functional teams.

Aufgaben

• Design, implement, and continuously mature security architecture across endpoint, identity, network, cloud, and email domains.
• Act as primary technical advisor to the external MSSP, reviewing and optimizing the Splunk Cloud SIEM and Cribl Stream/Edge data pipeline.
• Partner with Infrastructure, Cloud Admin, and Client Services teams to review, harden, and implement security controls (Defender for Endpoint, Intune, Proofpoint, Zscaler, Cisco FTD, FortiGate).
• Oversee vulnerability management, prioritize remediation with system owners, and manage/quality-assure penetration tests and red-team exercises.
• Perform and guide proactive threat hunting across XDR, identity, and network telemetry, converting findings into durable detections.
• Act as senior escalation point for the SOC, leading complex investigations, forensic analysis, and incident response playbooks/tabletop exercises.
• Mentor SOC analysts and junior engineers while maintaining high-quality architecture and runbook documentation.

Kenntnisse

Security architecture

Splunk Cloud SIEM

Cribl Stream/Edge

Microsoft Security Stack

AWS Security Services

Threat hunting

Ausbildung

Bachelor's degree in IT Security

Tools

Proofpoint

Zscaler

FortiGate

Cisco FTD

Jobbeschreibung

Cultural Fit

Your heart beats for security architecture, and you're driven by the mission to protect our organization and strengthen resilience against evolving threats? You enjoy translating security requirements into resilient, well-designed architecture? A supportive culture, strong teamwork, and continuous development matter just as much to you as technical expertise? Then welcome to AND-E!

Cultural Fit

Your heart beats for security architecture, and you're driven by the mission to protect our organization and strengthen resilience against evolving threats? You enjoy translating security requirements into resilient, well-designed architecture? A supportive culture, strong teamwork, and continuous development matter just as much to you as technical expertise? Then welcome to AND-E!

How You'll Make An Impact

• Design, implement, and continuously mature security architecture across endpoint, identity, network, cloud, and email domains
• Act as primary technical advisor to the external MSSP, reviewing and optimizing the Splunk Cloud SIEM and Cribl Stream/Edge data pipeline
• Partner with Infrastructure, Cloud Admin, and Client Services teams to review, harden, and implement security controls (Defender for Endpoint, Intune, Proofpoint, Zscaler, Cisco FTD, FortiGate)
• Oversee vulnerability management, prioritize remediation with system owners, and manage/quality-assure penetration tests and red-team exercises
• Perform and guide proactive threat hunting across XDR, identity, and network telemetry, converting findings into durable detections
• Act as senior escalation point for the SOC, leading complex investigations, forensic analysis, and incident response playbooks/tabletop exercises
• Mentor SOC analysts and junior engineers while maintaining high-quality architecture and runbook documentation

What It Takes To Succeed In This Role

• Bachelor's degree in IT Security, Cyber Security, Information Systems, or equivalent practical experience
• 5+ years of experience in IT security engineering, security operations, or infrastructure security
• Strong grounding in security-by-design, zero-trust, and frameworks such as NIST, ISO 27001, CIS Benchmarks, and MITRE ATT&CK
• Advanced knowledge of Splunk Cloud SIEM (SPL, use-case development) and Cribl Stream/Edge
• Hands-on familiarity with Microsoft Security Stack, AWS Security Services, Proofpoint, and Zscaler/Cisco/FortiGate
• Preferred certifications include: CISSP, GIAC (GCIH, GCIA, GCFA, GDSA), Microsoft SC-200/SC-100/AZ-500, AWS Security Specialty, Splunk Enterprise Certified Admin, Cribl Certified Observability Engineer
• Strong English communication skills (German a plus) and proven stakeholder/consulting ability across cross-functional teams

Why join us?

• Growth is important to us, that’s why we support your personal and professional development
• A working environment based on trust, encouragement and constructive feedback
• Collaboration with people from different countries and cultures
• 32 days annual leave plus 2 days off
• Flexible working hours and home office policy (approx. 60% possible)
• Attractive employee conditions for car insurance
• Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits
• Optional: Job ticket, car parking spaces, monthly travel allowance
• EGYM Wellpass
• Financial subsidy as a small wish-fulfiller
• Free coffee, tea, water and weekly fruit delivery
• Health management and pme family service

About Us

At AND-E, we're redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.

Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.