Requirements

Bachelor’s or Master’s degree in Computer Science, Information Security or a related field, or the equivalent through relevant certifications and hands-on experience.

3–5+ years in Information Security or Security Engineering, with hands-on ownership of security controls in a production environment.
Hands-on Engineering: deep experience implementing security controls in at least one domain such as endpoint, identity, cloud, network or application security. You configure controls yourself, not just review them.
Broad Security Fluency: solid understanding of core security domains and how they interact to defend an enterprise environment.
Technical Audit Mindset: you can “check the homework” of other teams and know exactly where to look to verify whether a system is truly compliant with CIS Benchmarks or internal standards.
Detection and Response: proficiency in log analysis and security telemetry, able to troubleshoot an incident across network, endpoint, application and cloud logs to find the smoking gun.
Scripting: basic to intermediate scripting skills (e.g., PowerShell, Python) to automate administrative tasks and security validations.

clear communicator who translates technical risk for different audiences, works controls through other teams and takes ownership of their work.
Languages: fluent English; German is a plus.
Specialist depth in one or more areas such as cloud security, endpoint and identity (e.g., Microsoft ecosystem), network security (e.g., SASE, segmentation) or application security.
Relevant certifications (e.g., OSCP, GIAC, CISSP, SC-200, AZ-500) and experience applying frameworks such as CIS Benchmarks, NIST or ISO 27001.

Cybersecurity Engineer (m/f/d)

Summary