Senior IT Security Engineer – Security Architecture, Operations

Posted 4hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior IT Security Engineer developing security architecture and operations for Hypoport’s network of technology companies. Leading monitoring, incident response, tooling and automation.

Responsibilities:

  • Further develop monitoring and alerting processes
  • Analyze security alerts and identify potential threats at an early stage
  • Lead incident response processes and initiate appropriate measures
  • Further develop incident response procedures
  • Operate and optimize existing security solutions
  • Evaluate new security technologies independently of vendors with regard to security, benefits, and effort required
  • Support the integration of new technologies into ongoing operations
  • Strategically develop the security tool landscape and security architecture for networks, endpoints, server infrastructure, and cloud environments
  • Analyze security processes and identify automation opportunities
  • Use modern technologies and assess the added value of AI-based solutions
  • Collaborate with IT operations, network, cloud and infrastructure teams, data protection, compliance, and external service providers
  • Present technical risks and proposed solutions clearly to different target groups
  • Document technical security measures
  • Support the preparation of evidence, audits, and reports on the current security posture

Requirements:

  • Several years of practical experience in IT security
  • Experience with security monitoring, incident handling, and modern security technologies such as SIEM, EDR/XDR, or NDR
  • Experience with network, endpoint, and identity security
  • Experience with on-premises and cloud security
  • Ability to assess and further develop security architectures and put them into practice
  • Experience evaluating, implementing, or further developing security solutions
  • Familiarity with Zero Trust, network segmentation, vulnerability and patch management
  • Familiarity with ISO 27001, BSI IT-Grundschutz, CIS, NIST CSF, or NIS2
  • Very good German language skills at C1 level
  • Good English language skills at B2 level
  • Ability to explain technical risks clearly and confidently represent professional positions
  • Experience with Cisco- or Microsoft-based security solutions is desirable
  • Certifications such as CISSP, CISM, or GIAC are a plus

Benefits:

  • Trust-based working hours
  • Sabbaticals
  • 30 days of paid annual leave
  • Option to add 20 flexible days off to your annual leave
  • Training sessions, knowledge days, exploration days, peer feedback, and individual development programs
  • Independent, results-oriented work without micromanagement or traditional hierarchies
  • Freedom to grow and support each other’s development
  • Fitness and Deutschlandticket subsidies
  • Company health insurance
  • Meal allowance
  • Company bike leasing program