Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Part Time/Full Time
- Contract Type
- Permanent employment
- Location
- Ratingen
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop security concepts for integration solutions, conduct threat analyses, and support compliance implementation while monitoring security-related events and incidents.
Job Technologies
Your role in the team
- You support the Integration Services in providing secure, compliant, and resilient integration solutions, ensuring the secure operation and further development of interfaces, data streams, integration platforms (e.g., APIM, Kafka, Kubernetes), and self-service functions.
- You define, document, and are responsible for security concepts for integration platforms and solutions, ensuring compliance with internal security policies (e.g., DKV & Integration Security Guideline, Secure Software Development, and Secure Engineering Principles).
- You support the implementation of regulatory and normative requirements such as ISO 27001, NIS-2, DORA, and SCA, and represent integration platforms and solutions in all security-relevant audits.
- You advise business units and technical stakeholders on designing secure integration architectures (API, event streaming, file-based integration) as well as on topics such as IAM, Zero Trust, Least Privilege, Secrets Management, and network segmentation.
- You conduct threat analyses and threat modeling for integration solutions, evaluate complex risk scenarios, and derive appropriate measures for risk mitigation.
- You work closely with the Security Operations Center (SOC), analyze and escalate security-relevant events, support incident response and forensic processes, and define clear security monitoring KPIs as well as a sustainable Security-by-Design culture.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- You bring expertise in integration solutions and platforms, web and mobile applications, ERP systems, as well as compliance and audit topics; ideally complemented by an Ethical Hacker certification.
- You work in a structured, analytical, and risk-oriented manner, proactively identifying and escalating security-relevant issues.
- You are capable of communicating complex technical issues in an understandable and audience-appropriate manner to both technical and non-technical stakeholders.
- You take clear ownership, demonstrate a high willingness for continuous learning, possess awareness of new risk factors (e.g., through AI), and translate security into practical action recommendations.
Experience
- You have several years of experience in cloud security (Azure), API security, network security, IAM, Zero Trust architectures, and Business Continuity Management in a comparable environment.
- You possess in-depth knowledge of relevant security frameworks and standards such as BSI, NIST, and ISO 27001, as well as experience with penetration testing, threat modeling, and security log analysis.
This text has been machine translated. Show original
What we offer
- This position can be filled on a full-time basis or in near-full-time part-time (at least 30 hours/week; excluding working students and explicitly advertised part-time positions).
- DKV Mobility is looking for the best talents and knows that they are not always available on a full-time basis.
- Many of our employees work part-time or in flexible working models.
- Please discuss with us during the application process the flexibility you require.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
More net
Food & Drink
Topics that you deal with on the job
Job Locations
This is your employer
DKV Euro Service GmbH + Co KG
As a leading European mobility service provider, we devote ourselves to efficient mobility solutions for controlling commercial fleets. Our portfolio includes smart products and services around refueling, alternative propulsion options, toll handling, liquidity benefits and innovative connected services.
Description
- Founding year
- 1934
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Logistics, Transportation
Expert Information Security
- Location
- Ratingen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
