ABOUT DELOS CLOUD:

Delos Cloud, a start-up founded by SAP, strives to deliver a sovereign cloud platform for the digital transformation of the German public sector. The platform is an essential component for the implementation of the German Administrative Cloud Strategy (DVS) in compliance with all relevant data protection, IT security, and secrecy requirements of the BSI. Delos Cloud is a trusted partner of the federal, state, and local IT service providers and complements their service portfolio. Therefore, you will find exciting and varied tasks in an innovative and meaningful environment. For more information, please visit: www.deloscloud.de

Depending on your personal interests and experiences, you will also support in the following areas:

• Performing offensive or analytical methods to identify vulnerabilities
• Developing training measures for security technologies, best practices, and potential security risks
• Supporting our IT and operations teams from a security perspective in carrying out internal IT projects and implementing security measures and controls for on-premise and cloud technologie

As a Senior Vulnerability Management Specialist you will be part of the Delos Cloud Vulnerability & Attack Surface Management (VASM) team.
At our company, security is part of our core brand, not just a cost center. With your experience, you will protect Germany’s only sovereign Azure Cloud and make a valuable contribution to the digitization of our country.
If you want to use your expertise to join an emergingand competent team in analyzing a multifaceted attack surface and safeguarding it against a wide spectrum of advanced threats, apply to join us.
What you’ll do:

As Cyber Security Design Senior Specialist – Technical Vulnerability Management, the focus of your activities will be on the following tasks:

• Conducting regular security scans to identify vulnerabilities
• Continuously evaluating and assessing identified vulnerabilities and the associated potential threats in terms of their validity, complexity, and impact
• Developing effective remediation or mitigation measures, as well as associated verification mechanisms and controls to contain possible residual risks
• Coordinating with other IT and operations teams to implement the developed measures and verification mechanisms, as well as monitoring and reporting on the implementation progress

Depending on your personal interests and experiences, you will also support in the following areas:

• Performing offensive or analytical methods to identify vulnerabilities
• Developing training measures for security technologies, best practices, and potential security risks
• Supporting our IT and operations teams from a security perspective in carrying out internal IT projects and implementing security measures and controls for on-premise and cloud technologies

What you bring:

• Proven experience in vulnerability identification and remediation
• Practical experience in conducting and analyzing security scans with applications such as Nessus, Qualys, OpenVAS, etc.
• In-depth knowledge of IT and operations topics such as networks, hardening and configuration of endpoints, software development and operations
• Knowledge of current standards, best practices, and trends in IT security

Ideally, you also bring:

• Willingness to quickly learn new topics and a very good understanding of current IT security issues, with a passion for staying up-to-date
• Deep understanding of security technologies and strategies for both on-premise and cloud systems
• Familiarity with Microsoft Azure services and concepts
• Excellent skills in the context of communication and coordination tasks
• Fluency in English and German language