FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in establishing and implementing cybersecurity strategies, including Security by Design and Secure Software Development Lifecycle practices. Proficient in cloud security standards, particularly within Microsoft Azure, and adept at translating regulatory requirements into technical standards.
Highest-signal resume keywords
Cybersecurity Strategy OwnershipCloud Security Standards DevelopmentSecure Software Development LifecycleThreat ModelingFluent German Communication Skills
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information SecurityApplication SecurityCloud SecurityDevSecOpsPenetration TestingIncident ResponseVulnerability ManagementSecurity CertificationsAI Security Risk ManagementISO 27001 Implementation
Soft Skills
CollaborationCommunicationLeadership
Tools & Technologies
Microsoft Azure
Industry Keywords
NIS2Cyber Resilience ActGDPRBSI C5Security Guild
Tech Stack
Tools & technologiesAzureCloudCyber SecuritySDLC
About the role
Key responsibilities & impact- Own the group-wide cybersecurity strategy and roadmap
- Establish Security by Design and a secure Software Development Lifecycle, including threat modeling, automated security checks, and engineering standards
- Create a transparent risk picture across products and companies
- Define cloud security standards for identity, access, networks, and core cloud components in collaboration with Platform Engineering
- Develop security standards for AI products and AI agents
- Address risks such as prompt injection, data leakage, permissions, and model supply chain security
- Oversee penetration testing, vulnerability management, and incident response
- Ensure the consistent remediation of identified risks
- Translate ISO 27001, BSI C5, NIS2, the Cyber Resilience Act, and GDPR into technical standards
- Build and further develop the group-wide Security Guild
- Embed security expertise within Product and Engineering teams
- Work closely with Platform Engineering as well as Product and Engineering teams
Requirements
What you’ll need- Several years of experience in information security, including multiple years of responsibility for security in a software, SaaS, or comparable technology environment
- Proven experience establishing application and cloud security directly within engineering teams, for example through DevSecOps, threat modeling, and Secure SDLC practices
- Strong practical knowledge of cloud security, ideally in a Microsoft Azure environment
- Good understanding of modern AI and agent security risks and how to address them technically in products
- Experience with NIS2, the Cyber Resilience Act, GDPR, and ISO 27001, as well as implementing them in technical processes
- Ability to establish security standards across the organization and gain the commitment of engineering teams without direct line management responsibility
- Fluent German communication skills (minimum C1 level)
- Fluent English communication skills (minimum C1 level)
- Experience in penetration testing, incident response, security certifications, or security within a multi-company or private-equity-driven structure is a plus, but not required
Benefits
Comp & perks- Sports and health programs
- Company events
- Support with kindergarten fees
- Company pension scheme
- Agile environment with short decision-making paths
- Significant scope to shape and influence
- Close collaboration with leadership and executive management
- Modern working environment