Senior Cyber Security Engineer (f/m/d) Cloud

Description

The company runs more than 6.2 million customers worldwide on its hosting and cloud products and is Europe's largest hosting provider and a pioneer in independent cloud solutions.

The company builds sovereign cloud architectures, high-performance GPU clusters and integrated AI automation tools, with a focus on digital sovereignty in Europe and on serving small and medium-sized businesses as well as large enterprises.

Teams work in agile fashion with transparent structures.

Security is designed into architectures, pipelines and operating processes from the start. Compliance evidence comes from routine operations rather than last-minute audit preparation. The role is about turning security requirements into resilient technical designs and checking that they actually work.

Responsibilities

• Help evolve the Secure SDLC by working alongside the development teams.
• Lead threat modeling and architecture reviews so risks are found during design, not just before release.
• Design IAM concepts, including role models, permission logic and recertification, and define cryptographic standards and baselines.
• Manage vulnerability and penetration test activities: scanning, CVSS scoring, prioritization and tracking of fixes.
• Define requirements for logging, monitoring and error handling and review how they are implemented across teams.
• Design and assess technical business continuity and disaster recovery tests.
• Automate compliance checks and evidence collection within the teams' CI/CD pipelines.

Requirements

• You have years of hands-on experience with standardised management systems and cyber security certifications and attestations.
• You have practical experience with at least two certified scopes under ISO 27001, IT-Grundschutz or BSI C5.
• Experience with ISO management systems for privacy standards is a plus.
• You have several years of experience with these standards and certifications in a technical organisation that offers technical products.
• You are motivated to make management system and certification work part of everyday operations using modern, tool-supported methods.
• You enjoy technology and accept that documentation matters, but you want it structured as efficiently as possible.
• You communicate with confidence and get results with international and internal stakeholders.
• You lead discussions in English at CEFR C1 or higher. Fluent German at CEFR C1 is a must.
• Solid conceptual knowledge of IAM, including role and permission models, SSO, federation, PAM and recertification logic.
• Practical experience with applied cryptography: TLS, PKI, key management and HSMs.
• Familiarity with ISO/IEC 27001 Annex A, BSI IT-Grundschutz, OWASP ASVS and Top 10, CIS Benchmarks and NIST CSF.
• Experience with Policy as Code and continuous compliance.
• An understanding of audit logic and of working effectively with external auditors.

Conditions

Hybrid working model with the option to work from home.

Flexible hours based on trust.

We welcome applications from all backgrounds, regardless of characteristics protected by applicable law.

Benefits

• Subsidised canteen and free drinks at some locations.
• Modern office with very good public transport links.
• Employee discounts on activities and products.
• Employee events such as summer and winter parties and workshops.
• Many training and development opportunities.
• Health offers such as sports and health courses.