REQUIRED QUALIFICATIONS:

 Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a
related field, or equivalent experience.
 5+ years of experience in cybersecurity roles, with at least 2 years in a security
architecture or design capacity.
 Proficiency in German, language is preferred.
 Strong understanding of security frameworks (e.g., NIST, ISO 27001, CIS Controls)
and industry best practices.
 Proficiency in network security, cloud security (AWS, Azure, GCP), and secure
software development.
 Hands-on experience with security technologies such as firewalls, IDS/IPS, SIEM,
IAM, DLP, and encryption tools.
 Strong knowledge of risk assessment, threat modeling, and vulnerability
management.
 Excellent problem-solving, analytical, and decision-making skills.
 Strong communication and collaboration abilities to work with cross-functional teams.

PREFERRED QUALIFICATIONS:

 Advanced security certifications such as CISSP, CISM, CCSP, or equivalent.
 Experience with DevSecOps practices and security automation tools.
 Knowledge of secure coding practices and familiarity with common software
vulnerabilities (OWASP Top 10).
 Experience in security for IoT, OT environments, or critical infrastructure.

 Design and develop enterprise security architecture and solutions aligned with
business objectives and security requirements.
 Evaluate current security technologies and recommend improvements to enhance
security posture.
 Collaborate with IT, DevOps, and business teams to integrate security into system
designs, software development, and cloud infrastructure.
 Conduct security assessments and threat modeling to identify potential risks and
design mitigation strategies.
 Define security standards, policies, and best practices for networks, systems,
applications, and data protection.
 Provide guidance on secure configurations, identity and access management,
encryption, and secure coding practices.
 Support incident response activities, including forensic analysis and root cause
investigations.
 Stay updated with emerging threats, vulnerabilities, and security technologies to
proactively address risks.
 Mentor and train security engineers and technical staff on security principles and
architecture.
 Participate in security audits, compliance assessments, and regulatory reviews.