We are looking for a motivated and practically oriented IT Infrastructure Security Engineer to support security projects and the daily operation of critical security services in a global IT environment. You will become part of a small expert team responsible for the design, implementation, automation, operation and development of security platforms. You will focus on areas such as endpoint security, vulnerability management, cloud security, hardening, integration, platform monitoring and lifecycle management. The role includes close cooperation with infrastructure and security teams, application owners, suppliers and stakeholders from the ITSM and CMDB areas.

• Collection, validation and implementation of security requirements and design of technical solutions.
• Participate in PoC activities, technology evaluations and design of new security features.
• Implement, operate and troubleshoot security solutions in the areas of infrastructure, cloud, endpoints and monitoring.
• Use Infrastructure as Code and automation for scalable deployment and management of solutions.
• Provide patch management and vulnerability remediation in a hybrid environment.
• Integrate security platforms with ITSM, CMDB and other enterprise systems.
• Automate repetitive tasks using scripts, APIs and workflows.
• Create documentation, set security standards and support compliance.
• Collaborate with internal teams, vendors and provide support to internal customers.

• STEM education + 5+ years of relevant experience or 10+ years of experience in IT.
• Experience in a global enterprise environment.
• Working knowledge of at least two areas: endpoint security, EDR, vulnerability management, DLP, CNAPP, DAST/SAST or SIEM.
• Experience with security platform administration, monitoring and lifecycle management.
• Knowledge of Linux (Debian, Ubuntu, RHEL, SUSE) and Windows Server environments including hardening, configuration and patching.
• Practical experience with Azure security (Entra ID, Defender, Sentinel); AWS experience is an advantage.
• Knowledge of AD, SSO, RBAC and the basics of network and security architecture.
• Troubleshooting skills using tools such as Wireshark, tcpdump, nmap, curl or Sysinternals.

Automation and DevOps

• Scripting in Bash, PowerShell or Python.
• Working with APIs (REST, GraphQL), automation and Infrastructure as Code.
• Experience with Terraform and GitLab/GitLab CI/CD.
• Ability to create test environments and labs (Docker, git, etc.).

Soft Skills

• Attention to detail, responsibility and ability to work in ambiguous situations.
• Strong organizational and communication skills including cooperation with suppliers.
• Pragmatic and independent approach, customer orientation and teamwork.
• Fluent in English.

• Great colleagues and fully flexible working policy
• Career coaching and development
• Flexible working hours
• Technical training and workshops
• Technical equipment for work (Mac / Windows)
• Company parties
• Company psychologist for mental well-being
• Multisport card