Senior IT Security Engineer

We are looking for a Security Engineer to support, automate and continuously improve the secure configuration of our enterprise assets. In this role, you will be the central point of contact for hardening standards, access controls, and the protection of our IT infrastructure against common attack vectors. You will work closely with various teams and locations to implement security requirements in a practical and sustainable way.

Your Responsibilities:

• Configuration Standards: Develop, maintain, and harden the security configuration standards for end-user devices, servers, network components, and software (on-prem/SAAS) 
• Identity and Access Management: Manage and oversee centralized Identity and Access Management throughout the account and employee lifecycles, including account provisioning, modification, and deprovisioning during onboarding, role changes, and onboarding
• Compliance Monitoring & Audits: Conduct recurring control reviews to verify that approved security processes, technical specifications, configurations, account management practices, and access controls are implemented and operating effectively across the organization
• Security Automation: Automate configuration validation and remediation, and integrate security-baseline checks into infrastructure provisioning and deployment workflows
• Collaboration: Work closely with various teams and locations to implement and oversee the above security measures in practice

Your Profile:

• 5+ years of expertise in IT security with relevant exposure to configuration and hardening
• 2+ years of practical experience implementing security frameworks and standards, such as CIS Controls and Benchmarks, NIST guidance, and ISO/IEC 27001
• Solid knowledge and practical experience of hardening operating systems (Windows/Linux/Mac) and network components
• 3+ years of experience with Identity & Access Management concepts (roles, permissions, recertification) Page 2 of 3
• Familiarity with configuration management or compliance tools 
• Analytical and strategic thinking
• Independent working style and initiative
• Strong communication skills
• Fluent English and German would be beneficial

Beneficial skills:

• Scripting skills (Python, PowerShell, or Bash)
• Knowledge with endpoint protection platforms (EDR/XDR)
• Security Monitoring, Investigation, and Threat Detection
• Experience integrating automated configuration, hardening, and compliance checks into infrastructure provisioning and deployment pipelines
• Any Relevant Certifications