Job
- Level
- Senior
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will collaborate closely with development teams to integrate security requirements, identify risks early, design robust IAM concepts, and manage vulnerabilities and testing processes.
Job Technologies
Your role in the team
- Führen Sie die Weiterentwicklung unseres Secure SDLC Seite an Seite mit unseren Entwicklungsteams.
- Lead Threat Modeling and architecture reviews - catching risks early in the design phase, not right before a release.
- Design robust IAM concepts (role models, permission logic, recertification) and define clear cryptographic standards and baselines.
- Take charge of vulnerability and pentest management: scanning, CVSS scoring, prioritizing, and tracking remediations.
- Specify requirements for logging, monitoring, and error handling, and review their implementation across the board.
- Design and evaluate technical Business Continuity (BC) and disaster recovery tests.
- Automate compliance and evidence collection directly within the teams' CI/CD pipelines.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- You are passionate about modern tool-supported, efficient integration of management systems and certification activities into the daily routine of an organization.
- You love technology, you do not shy away from documentation but would like to structure it as efficiently as possible.
- You convince through your confident and communicative character when achieving goal-oriented results with your international and internal interfaces.
- You proficiently lead discussions in English (CEFR C1 or higher). Completely fluent German (C1 CEFR level is a must).
Experience
- Well-founded, multi-year practitioner's experience with standardised management systems and certifications, attestations in the cyber security area.
- You have practical experience in two or more certified areas according to ISO 27001, IT-Grundschutz, BSI C5. Additional ISO management system experience with privacy standards is a plus.
- You have multi-year experience with above standards and certifications in a technical organisation, as in the company offers technical products.
This text has been machine translated. Show original
What we offer
- Hybrid working model with home office option.
- Flexible working hours through trust-based working hours.
- An einigen Standorten gibt es eine subventionierte Kantine und verschiedene kostenlose Getränke.
- Modern office space with excellent transportation links.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous training and development opportunities.
- Various health offers, such as sports and health courses.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Berufliche Schulen Potsdam der ASG - Anerkannten Schulgesellschaft mbH
The Vocational Schools Potsdam of ASG offer a practice-oriented training for educators that closely integrates academic theory with professional practice. A competent team of instructors and regular collaborations with practice partners support the preparation for pedagogical roles in child and youth welfare.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Education System
Senior Cyber Security Engineer Cloud
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
