CyberSecurity Engineer (m/w/d)

Role Summary

Responsible for planning, implementing and maintaining security measures in IT systems and networks

Assess relevant security vulnerabilities, develop appropriate solutions and policies, and intervene in the event of a security incident

Responsibility and implementation of end-to-end application security across the entire value creation process for creating, delivering and maintaining our software products using our security platform and tools and in compliance with current security standards

Training and further education as well as support for “security champions” in software development according to OWASP SAMM

Participation in the creation of concepts, offers, guidelines, risk analyses, processes, templates and guidelines from a technological and security-relevant perspective

Advice and support for our colleagues from all areas of the company in the implementation of technical and organizational measures for cyber security in accordance with applicable legal requirements from ISO/IEC 27001, NIS2, CRA, etc.

Exchange and further development of cyber security with colleagues in the local and international environment

Requirements

• You have completed a degree in cyber/IT security or have comparable qualifications or experience
• You already have at least 5 years of experience in the field of cybersecurity
• BSI standards and BSI IT-Grundschutz are the basis of your actions, the BSI IT-Grundschutz compendium with its building blocks is the bible according to which you base your daily work
• For you, SAST, SCA, IAST are not cryptic names for objects in the starry sky, but rather skills and processes that are lived and applied in practice every day
• You are very familiar with security tools such as Falcon or similar, ideally Arnica and Sysdig, and have already used them fully in practice
• Kubernetes and CI/CD pipelines are familiar environments and facilities for you
• You have several years of experience in the area of application development and are well versed in a microservice architecture

You have in-depth knowledge of legal requirements and regulations from ISO/IEC 27000 / BSI §8a, NIS2, CRA, BSI, B3S, etc.

• You have already gained experience in consulting and implementing technical and organizational security measures
• Your know-how in security processes, SOC concepts and securing OT/IoT systems makes you ideal
• You have strong communication skills and a confident demeanor towards management and departments and are fluent in spoken and written English

Benefits

A strong team feeling and a strong sense of cohesion – confirmed by the last employee survey. Teamwork is our focus.

• Use our hybrid and flexible work design, which enables both on-site and mobile working, depending on the activity
• SWARCO offers a secure job in a stable industry in an international group
• Benefit from tailor-made further training opportunities (internal and external in seminars or via learning platforms)
• Take advantage of 30 days of vacation as well as special vacation, e.g. when getting married
• €50 tax-free every month – save on refueling, shopping or eating out with the SWARCO Card
• We offer a 40% subsidy for company pension schemes, far more than the statutory subsidy, as well as capital formation benefits
• Your health is important to us: Benefit from (e-)bike leasing and a €160/year subsidy for health care and fitness programs, e.g. via wellhub
• Our offer for your personal well-being includes free, unbureaucratic external advice for professional, private or health questions

About the Company

SWARCO | The Better Way. Every day.

Traffic is our world. SWARCO's products and systems make it safer, smoother and more comfortable.

5,500 mobility experts worldwide are working on traffic solutions for tomorrow and the day after.

This position can be carried out at all SWARCO locations within Germany.