Lead Secure by Design Consultant (all genders)

Lead Secure by Design Consultant (all genders)

Location: –

Type: Permanent, full-time

Start: Immediate or by arrangement

Your Mission

You will lead end-to-end ‘secure by design’ transformation programmes for our enterprise clients. These projects span several quarters and involve multiple teams, with you being responsible for the technical strategy, customer relationships and the final outcome.

Responsibilities

• Lead a Secure by Design transformation within the product organisation of a DAX 30 client, involving over 100 engineers, more than 20 product teams and a 18‑month roadmap. Responsible for target architecture, rollout plan and communication with the CISO and CTO.
• Run a cloud security programme for a critical infrastructure operator preparing for an audit. Define the control framework, risk assessment, security architecture, integrate into AWS/Azure/GCP landing zones, and report to senior management.
• Shape a company‑wide AI security programme (LLMs, agent‑based systems, MLSecOps) for a client preparing for the EU AI draft, implementing the regulation into technical reality.
• Build a Secure SDLC programme from scratch for a fast‑growing product company, including CI/CD security tools, large‑scale threat modelling, a network of security officers, and KRIs that the board actually reads.
• Internally, help shape the practice itself: methodologies, accelerators, recruitment, talent development, and the development of our AI‑powered Secure‑by‑Design product.

Technical Skills

• AWS
• GCP
• Terraform
• GitHub Actions
• SonarQube
• STRIDE
• PASTA
• MAESTRO
• NIS2
• CRA
• EU AI Act

Your Profile

Must haves:

• At least 7 years’ experience in cybersecurity, with a proven track record of successfully leading end‑to‑end client programmes for large enterprises
• In‑depth technical expertise in cloud security (AWS, Azure or GCP) and modern software development practices (CI/CD, IaC, containers)
• Hands‑on experience in leading transformations in the areas of ‘Secure‑by‑Design’, security architecture, Secure SDLC, cloud security or AI security at enterprise level
• Comfortable steering the room with CISOs, CTOs and product leadership and at ease in an architecture deep‑dive with a senior engineer
• Ready to work on‑site three days a week and open to working at our clients’ sites in the DACH region for up to five days a month
• Experience in at least one of the following areas: AI security / MLSecOps, Kubernetes platform security, regulatory programmes (NIS2, DORA, CRA, EU AI Act)
• Certifications in cloud security (CCSP, AWS / Azure / GCP Security Specialty)
• Proven track record in building and managing consulting teams or security champions
• Public presence through presentations, publications, OSS, or a blog

Benefits

• Performance bonus
• +30 days of paid vacation plus additional days off on Christmas, New Year’s Eve, and your birthday
• Job ticket available, up to 6 months of furnished transitional housing possible, and relocation costs covered. EU Blue Card sponsorship and relocation package for international hires.
• Hybrid work: 3 remote days per week with trust‑based working hours; workations for balancing children’s school holidays.
• Full coverage of advanced trainings, certification costs, and educational leave for exam days.
• In‑house gym, massage chairs, gaming area, and dedicated break spaces.
• Team events, after‑work gatherings, paid team vacations, entertainment options such as game consoles, table tennis, chess, Skipbo.
• Latest work equipment and ergonomic workspace, including phone, laptop, headphones, and choice of Mac or Windows.
• Training & education: all job‑related training or part‑time studies, language courses, and continuous learning on our platforms.