Security Engineer

Our client is searching for an experienced IT Security Engineer/Administrator, you will take ownership of key security operations across a complex IT environment, with a strong focus on vulnerability management and system hardening.

Core Responsibilities

• Own and operate the organisation’s vulnerability management process end to end, including scanning, risk assessment, prioritisation, remediation tracking, and reporting

• Design, implement, and continuously improve system hardening standards across Windows and Linux environments in line with recognised security frameworks

• Coordinate with infrastructure and security teams to remediate vulnerabilities and validate security controls.

• Support endpoint security operations (EDR/XDR) and participate in incident response activities

• Maintain security documentation and support compliance, audits, and regulatory requirements

Must-have

• Hands on experience in vulnerability management (scanning, assessment, remediation tracking, risk prioritisation using CVSS/EPSS)

• Experience with vulnerability scanning tools such as Nessus, Qualys, Rapid7 or OpenVAS

• Strong practical experience in system hardening (Windows / Linux) using recognised standards (CIS Benchmarks, BSI IT Baseline Protection, DISA STIGs)

Fluent German Language

Nice to have:

• Experience with Linux environments
• Solid understanding of basic networking concepts (TCP/IP, firewalls, segmentation)
• Familiarity with EDR/XDR platforms (e.g. CrowdStrike, Microsoft Defender, SentinelOne)
• Experience working in regulated environments (e.g. financial services, banking, insurance)
• Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls
• Basic understanding of regulatory standards such as DORA, MaRisk
• Willingness to support during critical incidents or high-severity vulnerabilities