Network and Application Security Engineer (f/m/d)

About the Position

Network and Application Security Engineer (f/m/d)

COMPARUS GmbH is seeking a Network and Application Security Engineer to enhance our platform's security in a hybrid cloud environment.

Responsibilities

As a Network & Application Security Engineer, you will develop and implement security mechanisms that make our systems more robust, transparent, and resilient to attacks. Your focus is on:

• Reducing attack surfaces
• Security by Design
• Integrating security into our development and platform architecture

You will work closely with platform, DevOps, and engineering teams to ensure that security is built into the system at an early stage.

Your Area of Responsibility

• Attack Surface and Vulnerability Management

  • Analyzing vulnerabilities in networks, applications, and APIs.
  • Prioritizing based on actual risk rather than tool output.
  • Establishing a structured, repeatable vulnerability management process.

• Network and Platform Security

  • Designing and implementing modern network segmentation.
  • Further developing zero-trust architectures.
  • Securing hybrid cloud environments in AWS, Google Cloud, Kubernetes, and OpenStack.

• Application Security and DevSecOps

  • Integration of security into CI/CD and development processes.
  • Securing services, APIs, and platforms in collaboration with DevOps teams.
  • Threat modeling and security reviews for new and existing components.
  • Securing the software supply chain while handling a significantly higher volume of changes.

• Security of Agent-based Systems

  • Securing AI agents in development and in production: rights and identity models for non-human actors; handling of secrets; securing tool and API access; prompt and data flow risks; verifiable evidence of what an agent has done.
  • Defining the parameters within which agent-generated code may be deployed into production.

• Detection and Response

  • Further development of Data Loss Prevention.
  • Analysis and support during security incidents.
  • Assistance with forensic investigations.

• Interface with the ISMS

  • Technical support for risk analyses and audits.
  • Translating regulatory requirements from ISO 27001, NIS2, DORA, and the EU AI Act into concrete technical measures.
  • Support for the technical aspects of client audits, without audits dominating your day-to-day operations.

Expected Impact

• After 30 days

  • A clear picture of our attack surfaces across the network, platform, and applications.
  • A shared understanding of which risks are real and which are merely on a list.

• After 60 days

  • Prioritized measures with responsible parties and deadlines.
  • Initial security checks are running automatically in the pipeline.
  • Threat modeling is part of the design process for new components.

• After 90 days

  • Vulnerability management operates as a process, not as a one-off task.
  • Segmentation and access models are noticeably tighter.
  • An initial robust permissions and evidence model is in place for agent-based components.

• Perspective 6 to 12 months

  • Security is embedded in the development process and is no longer dependent on specific individuals.
  • Technical evidence for audits is generated as part of day-to-day operations.
  • New platform components go into production securely, including – and especially – agent-based ones.

Requirements

• Several years’ experience in security engineering
• Practical experience in at least two of the following areas: cloud security, application security, network security, vulnerability management, DevSecOps
• Proficiency in Linux, container and platform technologies, as well as APIs
• Understanding of modern security architectures, particularly Zero Trust
• An interest in addressing security issues for AI-supported and agent-based systems for which no standards yet exist
• Experience in regulated environments, ideally in banking or financial services, is helpful
• Knowledge of NIS2, DORA, BSI Basic Protection, or the EU AI Act is helpful but not essential
• Experience with incident response and forensic investigations is a plus
• German at C1 level and professional-level English

We Offer

• Permanent, full-time, remote in Germany or hybrid in Hamburg, with travel accounting for less than 10% of working time
• High degree of autonomy, no corporate overhead
• Direct influence on architecture and the security model
• An engineering team that views security as a partner rather than a control function
• Security challenges at a stage where no one has yet provided definitive answers
• Modern cloud and platform environments
• 30 days’ annual leave, company pension scheme, childcare allowance
• Professional development and certification
• Attractive remuneration package and long-term prospects

Cultural Fit

For us, security is built into the design, not identified through an audit.

This role is for you if you:

• View security as embedded in the code and architecture, not in a policy document
• Prioritize risks based on reality, not on tool output
• Can tolerate and explain the trade-offs between delivery speed, risk, and regulatory requirements
• See AI-supported development as a security task and see no reason to hold back

If you view security primarily as a control, documentation, or approval function, this role is probably not the right one for you.

Call to Action

If you view security as a systemic component of modern software and cloud architectures, we should have a chat.

Easy Apply with your CV or LinkedIn profile. 60 seconds is all it takes.

Benefits & Essentials

Because your commitment counts!

• Lunch
  • Enjoy high-quality meals at discounted prices.
• Childcare
  • We subsidize the care of pre-school children.
• Commuting
  • We subsidize your travel by public transport.
• Retirement Plan
  • Benefit from additional provisions for your future.
• Flexible working hours
• Work from home option
• State-of-the-art hardware
• Drinks and fresh fruit

Application

We would like to get to know you.

Upload Attachment (Resume, Cover Letter, etc.)

Ich habe die Datenschutzerklärung der COMPARUS GmbH gelesen und stimme der Verwendung meiner Daten für den Bewerbungsprozess und zur Kontaktaufnahme - sowie der Löschung nach spätestens 26 Wochen - zu.