Senior Cyber Security Engineer

Responsibilities

• Operate and continuously improve the cyber security posture of ControlExpert’s on-prem and partially cloud environments
• Act hands‑on in incident response, vulnerability management, endpoint security and operational security engineering
• Security incident triage, investigation, and response (incl. external SOC 24/7 coordination)
• Forensic investigations and root cause analysis
• Endpoint security rollout and onboarding of new environments and clients
• Vulnerability Management: CVE assessment and prioritization, Dispatching remediation actions to responsible teams and tracking mitigation and closure
• Review of external security findings (e.g. Bitsight, penetrations tests)
• Operational security consulting for internal product and platform teams
• Continuous improvement of operational security processes and tooling
• Support onboarding and mentoring of junior engineers
• Contribution to selected group initiatives (e.g. IAM, shared service preparation)

Requirements

• Several years of professional experience in IT security / cyber security operations
• Strong hands‑on experience in: Incident response and investigations, Vulnerability management and remediation processes, Endpoint protection and XDR solutions, Network and system security (on‑prem and cloud)
• Experience working with SIEM security monitoring tools, e.g. Elastic and solid understanding of enterprise IT environments and automation
• Ability to work independently and communicate clearly with technical and non-technical stakeholders
• Fluent English, German desirable
• Nice-to-have: Certifications (CISSP, CISM, CEH, GCIA, e.g.), Experience with cloud security (AWS / Azure), Experience in regulated environments (ISO, NIS2, SOC)

Hard Skills

• incident response
• vulnerability management
• endpoint security
• forensic investigations
• root cause analysis
• CVE assessment
• remediation processes
• network security
• system security
• cloud security

Soft Skills

• independent work
• clear communication
• mentoring

Certifications & Qualifications

• CISSP
• CISM
• CEH
• GCIA