IT Security Engineer (gn)

In this IT Security role you protect our cloud-based claim platform by implementing and maintaining security controls. You will work with Azure and/or AWS, monitor threats, and drive vulnerability management and security automation. You’ll partner with cross-functional teams to embed secure development and response capabilities, enabling a safe, scalable digital experience for insurers and drivers. This is an opportunity to shape the security posture of a cutting-edge, AI-powered claims platform.

• Flexible working hours
• ~60% remote work
• Urban Sports Club
• JobRad bicycle leasing
• Allianz-Products discounts
• Private leasing options for tech devices

• Plan, implement and manage security solutions for IT systems and networks based on policies and standards
• Secure, maintain and improve Azure and/or AWS cloud environments
• Monitor security posture through threat detection and audits
• Identify security gaps via analyses, assessments and penetration testing, and support remediation
• Manage the vulnerability management program: scanning, risk prioritization and remediation tracking
• Design, build and maintain security automation capabilities and SOAR workflows
• Support application security initiatives and promote secure development practices
• Respond to security incidents, support investigations, and advise teams on security best practices

• Several years of experience in IT security, including vulnerability management and incident response
• Hands-on experience securing Azure and/or AWS environments
• Experience with vulnerability management platforms (e.g. Rapid7, Nessus, Qualys), SOAR workflows, and security automation
• Proficiency in PowerShell and/or Python
• Knowledge of secure software development and security testing practices
• Strong knowledge of network security, SIEM, XDR/EDR, firewalls, VPNs, IDS/IPS, encryption technologies, and security monitoring tools
• Fluent English; German language, relevant certifications, degree in a related field, and knowledge of ISO 27001, NIS2, or SOC 2 are advantageous

• Self-motivated
• Analytical
• Solution-oriented
• Azure and/or AWS cloud security
• Vulnerability management platforms (Rapid7, Nessus, Qualys)
• SOAR workflows and security automation