Purpose of Position

Your role is to establish and lead an AppSec program within the Product and Technology department, acting as an evangelist for AppSec, trusted by engineers and managers alike. As a member of the core security team, you will engage in assessing application design proposals, to identify improvements to enable our engineers to create secure products. You will own the existing training program, redesign it to better equip engineers with the knowledge needed to develop secure applications, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T.

What you'll be responsible for

• Secure the SDLC: Integrate security tooling (e.g. SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs. Automate and optimise checks so teams can identify and fix issues early and efficiently.
• Threat modelling & secure design: Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews.
• Code & architecture reviews: Guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support.
• Vulnerability lifecycle management: Identify, triage, track and report on vulnerabilities across internal and external apps and systems. Collaborate with engineers to close gaps efficiently. Support the bug bounty process with finding validation. Present vulnerability management reports to our heads of department.
• AI/ML & LLM security: Provide guidance on secure development of AI/LLM-powered features. Help teams manage risks such as prompt injection, model misuse, and data leakage. Lead threat modelling exercises for AI components and advise on secure integration patterns.
• Incident response collaboration: Support investigation and root cause analysis of application-layer incidents. Contribute to post-incident reviews and longer-term mitigation strategies.
• Security culture & enablement: Act as a security champion for development teams. Be an enthusiastic and vocal advocate for application security across all engineering and product teams. Nurture and report on our application security training program for our code contributors. Deliver workshops and technical deep-dives on secure development practices. Contribute to playbooks, documentation, and internal standards.
• Research & innovation: Stay ahead of industry threats and attack trends. Propose and test innovative ideas to reduce risk across our software supply chain and platforms. Showcase how to use AI and AI-powered tools to enhance productivity and improve our security posture.
• 
  

About this job

IT Security Engineer / Cyber Security Specialist (m/w/d)

hours per week

• indefinite
• Earliest start date: immediately

Secure an internationally networked industrial IT system – from ISMS to the implementation of effective security measures.

Effective IT security.

Do you want to not only assess security risks, but also sustainably improve the security of an internationally operating industrial company? You will further develop the ISMS and implement security initiatives.

This position offers a gross annual salary of €75,000–95,000 – depending on your experience and qualifications.

Your tasks

• You will further develop the Information Security Management System (ISMS) and support its implementation.
• You assess IT security risks related to software, hardware and systems – including in the OT environment.
• You lead IT security projects or contribute your expertise to ongoing security initiatives.
• You select external security service providers and suppliers, evaluate their services, and ensure quality.
• You will work with specialist departments and IT teams on effective, practical security measures.

This is what you bring with you

• Degree in computer science, information security or comparable training and several years of professional experience in IT security.
• Practical experience with modern security requirements and threat scenarios.
• Knowledge of EDR, NDR, XDR, firewall, network segmentation, system hardening, virus scanning, monitoring and alerting.
• Ideally, relevant security certifications.
• Analytical, structured work style and strong communication skills.
• German language skills at least at C1 level and good English for international cooperation.

Security that doesn't remain in theory

With us, you'll work closely with IT, specialist departments, and industrial systems. This allows you not only to define security requirements but also to implement them effectively and pragmatically together with all stakeholders.

Taking responsibility together

Our client is an internationally operating industrial company. High product quality, open communication, initiative, and intensive teamwork form the basis of our collaboration. Your perspective matters when it comes to the long-term development of information security.

You can look forward to that.

• Permanent employment contract in a future-proof industry.
• 30 days of vacation and flexible working hours without core working hours.
• Additional benefits and on-site canteen.
• Professional and personal development.
• Annual gross salary of €75,000–€95,000, depending on experience and qualifications.

This is how it continues

1. You apply with your CV and relevant certificates.
2. We will review your documents and get back to you as soon as possible.
3. In an initial conversation, we get to know each other; depending on the position, a more in-depth conversation follows.

Transparent and uncomplicated

We don't need a cover letter. What matters is your profile, your project experience, and your eye for effective security solutions.

Your entry

You will learn about our security structures, relevant systems and contacts, and take on your topics step by step with an experienced network at your side.

Do you want to actively shape security in an internationally operating industrial company? Then apply now.

Provided in cooperation with the Federal Employment Agency.Purpose of Position

Your role is to establish and lead an AppSec program within the Product and Technology department, acting as an evangelist for AppSec, trusted by engineers and managers alike. As a member of the core security team, you will engage in assessing application design proposals, to identify improvements to enable our engineers to create secure products. You will own the existing training program, redesign it to better equip engineers with the knowledge needed to develop secure applications, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T.

What you'll be responsible for

• Secure the SDLC: Integrate security tooling (e.g. SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs. Automate and optimise checks so teams can identify and fix issues early and efficiently.
• Threat modelling & secure design: Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews.
• Code & architecture reviews: Guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support.
• Vulnerability lifecycle management: Identify, triage, track and report on vulnerabilities across internal and external apps and systems. Collaborate with engineers to close gaps efficiently. Support the bug bounty process with finding validation. Present vulnerability management reports to our heads of department.
• AI/ML & LLM security: Provide guidance on secure development of AI/LLM-powered features. Help teams manage risks such as prompt injection, model misuse, and data leakage. Lead threat modelling exercises for AI components and advise on secure integration patterns.
• Incident response collaboration: Support investigation and root cause analysis of application-layer incidents. Contribute to post-incident reviews and longer-term mitigation strategies.
• Security culture & enablement: Act as a security champion for development teams. Be an enthusiastic and vocal advocate for application security across all engineering and product teams. Nurture and report on our application security training program for our code contributors. Deliver workshops and technical deep-dives on secure development practices. Contribute to playbooks, documentation, and internal standards.
• Research & innovation: Stay ahead of industry threats and attack trends. Propose and test innovative ideas to reduce risk across our software supply chain and platforms. Showcase how to use AI and AI-powered tools to enhance productivity and improve our security posture.
•