Security Engineering Manager (m/w/d)

Why we need you

The Security Engineering Manager owns Maltego’s operational security function and leads the team that protects our infrastructure, product, and corporate environment.

This is a hands‑on technical role combined with people leadership. You will run detection and incident response, harden our multi‑cloud and endpoint estate, embed security into engineering workflows, and build the practices and team that scale with the company. You act as the technical authority for operational security while partnering closely with Engineering, Corporate IT, and our Governance, Risk & Compliance (GRC) function.

Reporting initially to the Head of Infrastructure & Operations, you set operational security direction independently and translate risk into concrete, prioritized action. Success in the first phase means a well‑instrumented and measurable security posture, reliable incident response, and a team operating to clearly defined technical standards.

Key Responsibilities

• Own detection, triage, and resolution of security incidents across cloud, product, and corporate environments – ensuring fast, reliable response and continuously improving incident response playbooks and tooling (Microsoft Sentinel, Microsoft Defender).
• Own operational security monitoring across the multi‑cloud estate (Azure as primary, plus AWS and GCP), tuning detections, alerting, and response workflows for fast and reliable threat handling.
• Drive vulnerability management end‑to‑end – coordinating scanning, prioritization, and remediation tracking with Nessus and Snyk in partnership with Engineering.
• Define security baselines and secure‑by‑default standards, and embed them into the software development lifecycle and infrastructure, integrating tooling such as Snyk into engineering workflows.
• Manage endpoint and identity security across Windows and macOS fleets using Microsoft Intune, Defender, and Purview, ensuring consistent hardening and data protection.
• Build and lead the operational security team – line‑managing and mentoring engineers, contractors, and working students toward clear technical and delivery standards.
• Plan and deliver security awareness and enablement across the organization, including onboarding content and phishing simulations, translating risk into plain language for non‑technical audiences.
• Partner with the AI transformation team to engineer security guardrails and monitoring for the responsible use of AI across the organization.

Required Qualifications (Must Have)

• 5+ years in security operations or security engineering, preferably in a SaaS or B2B software environment.
• Experience owning security outcomes or domains end‑to‑end (not only contributing to them).
• Hands‑on incident detection and response experience, including SIEM (Microsoft Sentinel), EDR/XDR (Microsoft Defender), and cloud security monitoring.
• Strong technical fluency across multi‑cloud infrastructure (Azure primary; AWS and GCP) and endpoint/identity management (Microsoft Intune, Windows, macOS).
• Experience with vulnerability management and developer security tooling such as Nessus and Snyk, including coordinating remediation with engineering teams.
• Proven ability to define and embed security baselines and secure‑default standards into engineering and infrastructure.
• Proven people leadership experience, including setting expectations, developing engineers, and holding teams accountable for delivery and technical quality.
• Clear communicator able to translate security risk into plain language for engineers and non‑technical stakeholders.
• Comfortable acting as the primary operational security practitioner, setting technical direction independently while collaborating with a separate GRC function.
• Professional proficiency in English.

Preferred Qualifications (Nice To Have)

• Experience producing audit evidence for ISO 27001 / SOC 2 control operation and working with compliance automation platforms such as Vanta.
• Experience with Microsoft Purview for data security, DLP, or information protection.
• Relevant certifications such as CISSP, CISM, or Azure security certifications (e.g., AZ‑500 / SC‑200, SC‑900), GIAC certification (GCIH, GCIA).
• Experience in engineering security guardrails or monitoring for AI / LLM usage.
• Experience in a scale‑up or growth‑stage company where security functions are being built rather than inherited.
• Professional proficiency in German.

Team & Leadership

This is a people‑management position. You will begin by coordinating external contractors and working students, and are expected to lead a dedicated operational security team as Maltego scales – owning hiring, development, and performance for your direct reports while remaining hands‑on technically.

Current Environment

Cloud: Azure (primary), AWS, GCP. Detection & response: Microsoft Sentinel (SIEM), Microsoft Defender (EDR/XDR). Data & endpoint: Microsoft Purview, Microsoft Intune, Windows and macOS. Application & vulnerability security: Snyk, Nessus. Compliance automation: Vanta.

Why you will love Maltego

• Insights into the daily operations of a fast‑growing tech scale‑up.
• Competitive compensation with a bonus/commission structure based on pipeline creation.
• Inclusive, diverse culture, where your voice and contributions matter.
• Supported language courses.
• Mental health support via .nilo (psychologists & digital tools).

Location

Our Munich office

Equal Opportunity

At Maltego, we are committed to supporting diversity and inclusion in our organization. We are an equal‑opportunity employer. We welcome applications from all individuals regardless of race, religion, color, nationality, gender, sexual orientation, age, or disability.