Staff Cyber Security Engineer for TechOps Information Security team (hybrid)

About us:

At IONOS, you will work in partnership with different teams at the leading European provider of sovereign cloud infrastructure, cloud services and hosting services. We offer you a perspective in one of the most future-proof industries. We are characterised by open work structures, a first-name culture and flat hierarchies with an incomparable team spirit. We are firmly convinced that job and fun are compatible and offer the appropriate environment for this. With constant growth, we are always looking for new colleagues. Become part of IONOS and let's grow together.

Main responsibilities:

As a Cyber Security Engineer, you will play a crucial role in ensuring the security of our applications and systems. You will be responsible for identifying security risks, conducting security assessments, and developing security solutions to support our operations and development colleagues towards more resilient and robust applications. This role offers the opportunity to work on challenging projects and collaborate with cross-functional teams to implement best practices in cyber and information security.

Your main tasks include:

• Collaborate with technical teams to integrate security controls and measures into the software development lifecycle and secure operations proceduresConduct security assessments, such as penetration tests, threat modellings, and concept reviews
• Develop and run technical security tools to ensure central security controls such as vulnerability management or compliance of self-managed workstations
• Design and execution of targeted application and infrastructure security trainings

This is what we wish for:

The basis for this challenging position is in-depth experience in the field of information security.
You also have the intrinsic motivation and passion to keep your knowledge up to date.

• You understand the aspects of modern agile product development and you have hands-on experience with DevSecOps concepts
• You have experience with technical security audits of all kinds (white-box and black-box), ideally in regulated and certified environments, such as KRITIS, PCI-DSS.
• You are fluent with at least one programming language, ideally in Python and/or Java and experienced in modern virtual machine and container environments.
• You’re a true team player, always leading by example. You’re comfortable with leading projects and stakeholders efficiently also in stressful situations.
• Strong problem-solving skills, good English skills, quality awareness, personal responsibility and the ability to work in a team round off your profile.

What we offer:

• Access to local/international trainings, development and growth opportunities, including access to e-learning platforms, covering both technical and soft skills areas;
• Modern technologies, product responsibility;
• Flexible work schedule;
• Hybrid or full-remote work option;
• Medical services package from one of two private providers;
• 25 vacation days per year;
• Substitute days off for public holidays that occur on the weekend;
• Meal tickets;
• Internal referral program;
• Team events, networking events organized to promote a passionate, creative and diverse culture;
• Summerfest and Winterfest parties;
• Of course, coffee, soft drinks and fresh fruits are on us in the office.