Job
- Level
- Senior
- Ort
- Berlin
- Arbeitsmodell
- Hybrid, Onsite
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
Job Zusammenfassung
In diesem Job arbeitest du eng mit den Entwicklungsteams zusammen, um Sicherheitsanforderungen zu integrieren, Risiken frühzeitig zu identifizieren und robuste IAM-Konzepte zu gestalten, während du auch Schwachstellen und Tests verwaltest.
Job Technologien
Deine Rolle im Team
- Drive the evolution of our Secure SDLC side-by-side with our dev teams.
- Lead Threat Modeling and architecture reviews - catching risks early in the design phase, not right before a release.
- Design robust IAM concepts (role models, permission logic, recertification) and define clear cryptographic standards and baselines.
- Take charge of vulnerability and pentest management: scanning, CVSS scoring, prioritizing, and tracking remediations.
- Specify requirements for logging, monitoring, and error handling, and review their implementation across the board.
- Design and evaluate technical Business Continuity (BC) and disaster recovery tests.
- Automate compliance and evidence collection directly within the teams' CI/CD pipelines.
Unsere Erwartungen an dich
Qualifikationen
- You are burning for modern tool supported, efficient integration of management systems and certification activities into the daily routine of an organisation.
- You love technology, you do not shy away from documentation but would like to structure it as efficiently as possible.
- You convince through your confident and communicative character when achieving goal oriented results with your international and internal interfaces.
- You proficiently lead discussions in English (CEFR C1 or higher). Completely fluent German (C1 CEFR level is a must).
Erfahrung
- Well-founded, multi-year practitioner's experience with standardised management systems and certifications, attestations in the cyber security area.
- You have practical experience from two or more certified scopes according to ISO 27001, IT-Grundschutz, BSI C5. More ISO management system experience from privacy standards comes as a plus.
- You have multi-year experience with above standards and certifications in a technical organisation, as in the company offers technical products.
Unser Angebot
- Hybrid working model with home office option.
- Flexible working hours through trust-based working hours.
- At some locations a subsidized canteen and various free drinks.
- Modern office space with very good transport connections.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous training and development opportunities.
- Various health offers, such as sports and health courses.
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Berufliche Schulen Potsdam der ASG - Anerkannten Schulgesellschaft mbH
Die Beruflichen Schulen Potsdam der ASG ermöglichen eine praxisorientierte Ausbildung zum Erzieher, die schulische Theorie und berufliche Praxis eng miteinander verbindet. Ein kompetentes Dozententeam sowie regelmäßige Kooperationen mit Praxispartnern fördern die Vorbereitung auf pädagogische Berufe in der Kinder- und Jugendhilfe.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Bildungswesen
Senior Cyber Security Engineer Cloud
- Ort
- Berlin
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
