Secure by Design Consultant (all Genders)

Secure by Design Consultant (all Genders)

Your Mission

As a Senior Consultant at CLOUDYRION, you’re the central point of contact for our customers. You guide them from strategic consulting through to hands‑on technical implementation. You review and design modern security architectures for digital products and platforms, lead threat‑modeling workshops, establish Secure SDLC processes, and integrate effective tools into complex DevSecOps environments.

On the hand, you work independently, actively contribute your experience, and set clear impulses. Here you have the chance to make quite an impact. At the same time, you’re part of a strong and experienced team that shares knowledge, supports one another, and is united by the goal of rethinking security and implementing it sustainably.

Your Role

• You run threat‑modeling workshops together with product or platform teams and advise decision-makers strategically on Secure‑by‑Design.
• You analyze complex cloud, software and AI architectures, improve technical and organisational processes, and controls to derive measurable key risk indicators (KRIs).
• You contribute hands‑on by integrating security tools into CI/CD pipelines, optimising Secure SDLC processes, and confidently working with infrastructure code when needed.
• You present and facilitate discussions confidently with both technical and non‑technical stakeholders.
• You’re part of an interdisciplinary team and actively shape the development of our practice areas.

Your Profile

Must haves

• At least 3 years’ experience in cybersecurity, for example in consulting, cloud, or software engineering
• Practical experience running security risk assessments and producing security plans or concepts that engineering teams actually used
• Solid hands‑on knowledge in at least one of: cloud security (AWS / Azure / GCP), threat modelling, application security, CI/CD security tooling
• Confident in front of a client — running a workshop, presenting findings, writing for a CISO or product‑owner audience
• Business fluent written and spoken English
• German at B2 or higher
• Familiarity with the EU Cyber Resilience Act (CRA) or EU AI Act
• Experience with a recognised risk‑assessment method (ISO 27005, NIST 800‑30, FAIR, BSI‑Standard 200‑3)
• A cloud security certification (AWS / Azure / GCP security specialty, or CCSP)
• Kubernetes, Infrastructure as Code (Terraform), container security
• Open source contributions, a blog, talks or any portfolio of how you think

Training & Education

We cover your job‑related training or part‑time studies, and even a language course! Additionally, you can continuously expand your knowledge on our learning platforms.

Benefits

• 30+3 days of paid vacation—never work on your birthday, Christmas, or New Year’s Eve again!
• Relocation support: up to 6 months of furnished transitional housing, job ticket, relocation costs covered, and EU Blue Card sponsorship.
• Hybrid work with two remote days per week, trust‑based working hours in line with the needs of your family, and the opportunity of workations to fairly balance your children’s school holidays and your mission with us.
• Individual learning and development opportunities, including full coverage of advanced trainings, certification costs, and educational leave for exam days.
• In‑house gym, massage chairs, gaming area, and dedicated break spaces.
• Regular team events, fine dining in the office, and plenty of space for real collaboration.
• Work‑life balance: in‑house fitness club & yoga room, massage chair, relaxation rooms for napping, and flexible hours in a hybrid 3:2 model.
• Competitive salary, bonus programs, and vouchers & rewards.
• Tech equipment: latest phone, laptop, headphones, ergonomic workspace.
• Nice office: view from 11th floor overlooking Düsseldorf skyline, free drinks, coffee, fruits, snacks; cafeteria discount at Bistro EssART.