Position Overview - Security Engineer

Profile Summary

We are seeking a highly skilled Security Engineer to join our European cybersecurity operations and engineering team. This role requires deep technical expertise in building, deploying, and maintaining secure systems while ensuring compliance with European cybersecurity and data protection standards. The successful candidate will play a critical role in designing, implementing, and maintaining robust security controls that safeguard our infrastructure, products, and services.

Key Responsibilities

• Design, implement, and maintain security controls, monitoring systems, and detection mechanisms across cloud, on-premise, and hybrid environments.
• Conduct security assessments, threat modeling, penetration testing, and code reviews to identify and mitigate risks.
• Build automation frameworks for vulnerability management, incident response, and system hardening.
• Collaborate with software, infrastructure, and DevOps teams to integrate security into the full software development lifecycle.
• Support compliance with EU directives, including GDPR, NIS2, and the Cyber Resilience Act, as well as relevant ISO and ENISA standards.
• Respond to security incidents, perform root cause analysis, and implement corrective and preventive measures.
• Develop and maintain technical documentation, security guidelines, and playbooks.
• Contribute to continuous improvement of organizational security posture, tools, and processes.

Qualifications & Experience

• Proven experience in security engineering, infrastructure security, or DevSecOps in complex enterprise or cloud environments.
• Strong understanding of network protocols, firewalls, IDS/IPS, SIEMs, and endpoint protection solutions.
• Proficiency with cloud security and containerized environments, particularly Docker and Kubernetes.
• Hands-on experience with scripting and automation.
• Familiarity with vulnerability management, penetration testing methodologies, and secure coding practices.
• In-depth knowledge of EU data protection regulations and relevant security frameworks, such as ISO/IEC 27001, CIS and the ENISA guidelines.
• Ability to work independently on critical projects while collaborating effectively with cross-functional teams.

Language & Communication Requirements

• Professional proficiency in English, written and spoken, is mandatory.
• Proficiency in at least one additional EU language, such as German, French, Spanish, Dutch or Italian, is strongly preferred.
• Strong ability to communicate technical concepts to both technical and non-technical stakeholders.

Visa & Work Authorization

• Candidates must be eligible to work within the European Union.
• Visa sponsorship and relocation support are available for exceptional candidates.
• EU Blue Card applications are supported for highly qualified professionals where applicable.

Preferred Qualifications

• Master's degree in Computer Science, Cybersecurity, or related field.
• Industry certifications, such as CISSP, OSCP, OSWE, CISM, CKA/CKS, CEH, or equivalent.
• Experience with European or global compliance frameworks, such as SOC 2, PCI-DSS, ISO/IEC 27001.
• Experience in participating in ENISA initiatives, Horizon Europe projects, or EU-funded cybersecurity research.
• Previous experience in high-availability and critical infrastructure security engineering.

What We Offer

• Opportunity to work on mission-critical projects with a measurable impact across Europe.
• Access to modern security technologies and labs within a collaborative international team.
• Relocation and visa assistance for non-EU candidates.
• Competitive salary, comprehensive benefits, pension scheme, and continuous learning support.
• A diverse, inclusive workplace that values technical excellence, innovation, and European collaboration.

How to Apply

Please submit your CV to interview@cypsec.de. Make sure to attach a motivation letter outlining your expertise and career aspirations, and at least two supporting documents, such as your portfolio, publications or GitHub projects. We carefully review all relevant applications and will reach out when an opportunity matches your profile. Incomplete applications cannot be considered. All applications will be handled within 5 business days.