Security Engineer

About the role

As a , you will play a pivotal role in safeguarding our digital infrastructure and ensuring the integrity of our services. You will be responsible for identifying vulnerabilities, implementing security measures, and responding to incidents to protect sensitive information. Your expertise will contribute to the overall security posture of our organization, enabling us to deliver secure and reliable solutions to our clients. This position offers an exciting opportunity to work in a dynamic environment where you can make a significant impact on our security initiatives.

Key facts

What you'll do

• Conduct thorough security assessments and vulnerability scans to identify potential risks within our systems and applications.
• Develop and implement security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
• Collaborate with cross-functional teams to integrate security measures into the software development lifecycle, ensuring security is a priority from the outset.
• Monitor security alerts and incidents, responding promptly to mitigate threats and minimize potential damage.
• Perform root cause analysis of security incidents and develop strategies to prevent future occurrences.
• Stay updated on the latest security trends, threats, and technologies to continuously enhance our security framework.
• Provide training and guidance to staff on security best practices and awareness to foster a culture of security within the organization.
• Assist in the preparation for security audits and assessments, ensuring all documentation and evidence are in place for review.
• Collaborate with external vendors and partners to evaluate and implement security solutions that align with our business objectives.
• Participate in incident response planning and execution, ensuring that all team members are prepared to respond effectively to security breaches.
• Create and maintain detailed documentation of security incidents, procedures, and policies for future reference and compliance purposes.
• Engage in threat modeling and risk assessment exercises to identify and prioritize security risks across the organization.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 3 years of experience in a security engineering or related role, with a strong understanding of security principles and practices.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and vulnerability management solutions.
• Experience with scripting languages (e.g., Python, Bash) for automation of security tasks and processes.
• Familiarity with cloud security principles and experience securing cloud environments (e.g., AWS, Azure, GCP).
• Knowledge of compliance frameworks such as ISO 27001, NIST, or GDPR, and experience implementing security controls to meet these standards.
• Strong analytical and problem-solving skills, with the ability to think critically and act decisively in high-pressure situations.
• Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are highly desirable.

Nice to have

• Experience with threat hunting and incident response methodologies.
• Familiarity with DevSecOps practices and tools to enhance security within CI/CD pipelines.
• Knowledge of penetration testing methodologies and tools.
• Experience with security information and event management (SIEM) solutions.
• Understanding of network protocols and security architecture.

Skills & tools

• Security assessment and vulnerability management tools (e.g., Nessus, Qualys).
• Incident response and forensics tools (e.g., Splunk, Wireshark).
• Cloud security tools and services (e.g., AWS Security Hub, Azure Security Center).
• Programming and scripting languages (e.g., Python, JavaScript).
• Knowledge of security frameworks and compliance standards.

Practical notes

• This position is based in Düsseldorf, Nordrhein-Westfalen, and may require occasional travel for training or conferences.
• Candidates must be eligible to work in Germany; visa sponsorship is available for qualified applicants.
• The role may involve on-call responsibilities to address security incidents outside of regular business hours.
• Interested candidates can apply through the provided link: https://ontinue.bamboohr.com/careers/819.

META

Company: Ontinue

Title: Security Engineer

Listed

location: Düsseldorf, Nordrhein-Westfalen

Job type: Full-time