information security engineer in industrial software

Stellenbeschreibung:

Описание: The PSI Group develops software products that optimize the flow of energy and materials for utilities and industry. It produces process control systems supporting sustainable energy supply, production, and logistics by combining AI methods with industrially proven optimization methods. Its products can be operated on-premises or in the cloud.

Задачи

Perform technical analysis and review of on-premises and cloud system architectures and configurations;
Identify and advise stakeholders on technical improvements to system architectures and configurations;
Collaborate with technical stakeholders, including internal IT teams, software developers, and technical product managers, on security topics such as identity and access management, mobile device management, and network security;
Perform technical risk management activities, including risk identification, evaluation, and assessment;
Conduct and support information security incident response activities;
Enhance existing security operations setups with tools and procedures;
Support the implementation of technical and organizational measures, such as improving central logging and vulnerability management;
Set up central technical information security services for business units and subsidiaries abroad;
Automate information security-related activities;
Participate in information security-related due diligence activities;
Strengthen the information security and data compliance culture within PSI.

Требования

System engineering knowledge, including technical architectures and networking;
Understanding of technical security measures such as encryption and IAM;
Familiarity with information security tools such as Cloud Security Posture Management, Mobile Device Management, and Office365;
Familiarity with business tools and enterprise architecture, such as Jenkins, Confluence, and Jira;
Understanding of information security attacks, security operations, and incident response;
Basic scripting and programming skills, such as Python and shell/bash;
Knowledge of information security risk management;
Knowledge of network design and architecture;
Knowledge of cloud security and Terraform;
Understanding of SDLC and software development;
Analytical skills and an ownership mindset;
Good understanding of lean and agile practices;
Good communication and interpersonal skills;
Fluent written and spoken English;
Enthusiasm for information security, intrinsic motivation, curiosity, quick thinking, and continuous learning;
Proactive, collaborative attitude and ability to work comfortably in a lean and agile environment;
Nice to have: German, technical certifications such as CISSP, Cloud Security Certifications, or GIAC, scripting and programming skills such as JS, Ruby, or Python.