Senior Cyber Security Engineer (w/m/d) Cloud
Primary stack
Nice to have's
Job description
About the Position
Senior Cyber Security Engineer (w/m/d) Cloud
Revaler Straße 28-31, 10245 Berlin
About IONOS
At IONOS, we don't just manage servers; we shape the digital future for over 6.2 million customers worldwide with our solutions. As Europe's leading hosting provider and pioneer of independent cloud solutions, we are building a next-generation infrastructure: from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.
What drives us: Digital decision-making freedom for Europe and real impact for small and medium-sized enterprises (SMEs) and large companies. We work in agile teams, rely on transparent structures, and believe that excellence and innovation only arise from true teamwork.
Ready for your next step? Join IONOS and grow with us.
At IONOS, security is not an afterthought but part of our DNA. We integrate security where it matters: in architectures, pipelines, and operational concepts. Evidence should come from ongoing operations, not from audit preparation. For this, we are looking for someone who translates security requirements into robust technical concepts and verifies their effectiveness.
Responsibilities
- Drive the development and enhancement of our Secure SDLC directly alongside the development teams.
- Conduct threat modeling and architecture reviews – early in the design phase, not just before release.
- Design modern IAM concepts (role models, authorization logic, recertification procedures) and define cryptographic standards and baselines.
- Manage vulnerability and penetration testing: scanning, CVSS assessment, prioritization, and remediation tracking.
- Specify logging, monitoring, and error-handling requirements and support their implementation.
- Design and evaluate technical business continuity (BC) and restart tests.
- Automate evidence collection (Compliance as Code) directly in the CI/CD pipelines of the teams.
Requirements
- Cloud & Linux Mastery: Several years of solid experience with Linux and modern cloud infrastructure (including containers, orchestration, and networking).
- Vulnerability Expertise: Practical experience in vulnerability scanning, CVSS assessment, and triage of penetration testing findings.
- Automation Mindset: Secure scripting and automation skills (Python, Bash, Infrastructure as Code), ideally already used for automated evidence generation.
- Security by Design: A secure touch for security design principles and threat modeling.
- Consulting & Ownership: Strong consulting and review skills. You successfully implement security requirements for development and operations teams without taking away their technical responsibility.
- Vulnerability Management: SAST, DAST, and SCA tooling.
- Central Platforms: DefectDojo as a vulnerability management platform; SIEM and monitoring platforms.
- Identity & Encryption: IAM/PAM and PKI (operated by partner teams).
- Evidence Sources: Deep integration into CI/CD pipelines and ticketing systems for automated evidence generation.
- Communication: Fluent German and English (at least C1 level).
Nice to Have
- Deep conceptual knowledge in the field of IAM (role and authorization models, SSO, federation, PAM, recertification logic).
- Applied cryptography in practice (TLS, PKI, Key Management, HSM).
- Knowledge of common frameworks and standards such as ISO/IEC 27001 Annex A, BSI IT-Grundschutz, OWASP ASVS & Top 10, CIS Benchmarks, or NIST CSF.
- Experience with Policy as Code and Continuous Compliance.
- Understanding of audit logic and successful collaboration with external auditors.
We Offer
- Hybrid working model with the possibility of working from home.
- Flexible working hours through trust-based working time.
- Subsidized canteen and various free drinks at some locations.
- Modern office spaces with excellent transport links.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous opportunities for further training and development.
- Various health offers, such as sports and health courses.
Application Notice
We value diversity and welcome all applications – regardless of gender, nationality, ethnic and social origin, religion, disability, age, sexual orientation and identity, physical characteristics, marital status, or any other irrelevant criterion under applicable law.
Apply for this Job
© IONOS SE. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.