Staff Cyber Security (f/m/d)

1&1 IONOS SE; Karlsruhe; Hybrid; EUR 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Flexible hours

Canteen subsidies

Good transport access

Employee discounts

Company events

Training and development

Health programs

Zusammenfassung

1&1 IONOS SE in Karlsruhe seeks a Cybersecurity Engineer to safeguard applications and systems. You will identify risks, perform assessments, and develop security solutions, collaborating with development teams to implement best practices in cyber and information security.

You will work on challenging projects, lead security initiatives, and contribute to secure software delivery through hands-on testing and training, with a hybrid work setup and a strong focus on continuous improvement.

Qualifikationen

• In-depth experience in the field of information security.
• Strong motivation to keep knowledge up to date.
• Understanding of modern agile product development with hands-on DevSecOps experience.
• Experience with security audits (white-box/black-box), ideally in regulated environments (KRITIS, PCI-DSS).
• Fluent in at least one programming language, preferably Python or Java; familiar with VMs and containers.

Aufgaben

• Collaborate with technical teams to integrate security controls into the software development lifecycle and secure operations procedures.
• Build a holistic architecture covering baseline security needs and enhanced protection.
• Conduct security assessments, such as penetration tests, threat modelling, and concept reviews.
• Develop and run technical security tools for vulnerability management and compliance of self-managed systems.
• Design and execute targeted application and infrastructure security trainings.

Kenntnisse

Info security

DevSecOps

Security audits

Regulated environments

Python/Java

VMs & containers

Team leadership

English proficiency

Jobbeschreibung

Tasks

As a Cybersecurity Engineer, you will play a crucial role in ensuring the security of our applications and systems. You will be responsible for identifying security risks, conducting security assessments, and developing security solutions to support our operations and development colleagues towards more resilient and robust applications. This role offers the opportunity to work on challenging projects and collaborate with cross‑functional teams to implement best practices in cyber and information security.

Tasks

• Collaborate with technical teams to integrate security controls and measures into the software development lifecycle and secure operations procedures.


• Build a holistic architecture covering baseline security needs and enhanced level of protection to address critical security risks.


• Conduct security assessments, such as penetration tests, threat modellings, and concept reviews.


• Develop and run technical security tools to ensure central security controls such as vulnerability management or compliance of self‑managed workstations.


• Design and execution of targeted application and infrastructure security trainings.

Qualifications

• The basis for this challenging position is in‑depth experience in the field of information security.


• You also have the intrinsic motivation and passion to keep your knowledge up to date.


• You understand the aspects of modern agile product development and you have hands‑on experience with DevSecOps concepts.


• You have experience with technical security audits of all kinds (white‑box and black‑box), ideally in regulated and certified environments, such as KRITIS, PCI‑DSS.


• You are fluent with at least one programming language, ideally in Python and/or Java and experienced in modern virtual machine and container environments.


• You’re a true team player, always leading by example. You’re comfortable with leading projects and stakeholders efficiently also in stressful situations.


• Strong problem‑solving skills, good English skills, quality awareness, personal responsibility and the ability to work in a team round off your profile.

Benefits

• Hybrid working model.


• Flexible working hours through trust‑based working hours.


• At some locations a subsidized canteen and various free drinks.


• Modern office space with very good transport connections.


• Various employee discounts for activities and products.


• Employee events such as summer and winter parties, as well as workshops.


• Numerous training and development opportunities.


• Various health offers, such as sports and health courses.