Staff Cyber Security (f/m/d)

IONOS Group; Karlsruhe; Hybrid; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Hybrid working model

Flexible working hours

Canteen at some locations

Modern office and transport access

Employee discounts

Zusammenfassung

IONOS Group seeks a Cybersecurity Engineer to safeguard applications and systems, identify risks, and drive security enhancements across development and operations teams.

You will conduct assessments, design security controls, and lead initiatives to promote secure coding practices in a collaborative, cross-functional environment.

Qualifikationen

• Strong information security expertise.
• Motivation to keep knowledge up to date.
• Hands-on experience with DevSecOps concepts.
• Experience with security audits (white-box/black-box) in regulated environments like KRITIS, PCI-DSS.
• Fluent in at least one language, preferably Python and/or Java; comfortable with VM and container environments.

Aufgaben

• Collaborate with technical teams to integrate security controls into the software development lifecycle and secure operations procedures.
• Build a holistic architecture covering baseline security needs and enhanced protection against critical risks.
• Conduct security assessments such as penetration tests, threat modelling, and concept reviews.
• Develop and run technical security tools for vulnerability management and compliance of self-managed workstations.
• Design and execute targeted application and infrastructure security trainings.

Kenntnisse

Information security

DevSecOps

Penetration testing

Python/Java

Team collaboration

Tools

Docker

Kubernetes

VMs

Jobbeschreibung

As a Cybersecurity Engineer, you will play a crucial role in ensuring the security of our applications and systems. You will be responsible for identifying security risks, conducting security assessments, and developing security solutions to support our operations and development colleagues towards more resilient and robust applications. This role offers the opportunity to work on challenging projects and collaborate with cross-functional teams to implement best practices in cyber and information security.

Tasks

• Collaborate with technical teams to integrate security controls and measures into the software development lifecycle and secure operations procedures.
• Build a holistic architecture covering baseline security needs and enhanced level of protection to address critical security risks.
• Conduct security assessments, such as penetration tests, threat modellings, and concept reviews.
• Develop and run technical security tools to ensure central security controls such as vulnerability management or compliance of self-managed workstations.
• Design and execution of targeted application and infrastructure security trainings.

Qualifications

• The basis for this challenging position is in-depth experience in the field of information security.
• You also have the intrinsic motivation and passion to keep your knowledge up to date.
• You understand the aspects of modern agile product development and you have hands-on experience with DevSecOps concepts.
• You have experience with technical security audits of all kinds (white-box and black-box), ideally in regulated and certified environments, such as KRITIS, PCI-DSS.
• You are fluent with at least one programming language, ideally in Python and/or Java and experienced in modern virtual machine and container environments.
• You’re a true team player, always leading by example. You’re comfortable with leading projects and stakeholders efficiently also in stressful situations.
• Strong problem‑solving skills, good English skills, quality awareness, personal responsibility and the ability to work in a team round off your profile.

Benefits

• Hybrid working model.
• Flexible working hours through trust‑based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.