Senior Cybersecurity Consultant

QESTIT Group

. Build and further develop the Cybersecurity practice in Stuttgart .

Posted 10/8/2026full-timeRemote • GermanySeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity practices, including governance, compliance, and regulatory requirements such as DORA, NIS2, and ISO 27001. Proficient in conducting penetration tests, vulnerability management, and supporting Secure SDLC projects with strong communication skills in both German and English.

Highest-signal resume keywords

Cybersecurity Practice DevelopmentGovernance and Compliance AdvisoryPenetration Testing MethodologiesVulnerability ManagementISO 27001 Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability ManagementSAST AnalysisDAST AnalysisSecure SDLCISO 27001BSI IT-GrundschutzSecurity Checks in CI/CDArchitecture ReviewsOffensive Security

Soft Skills

Strategic ThinkingAnalytical SkillsExcellent CommunicationQuick LearnerClient Presentation Skills

Industry Keywords

DORANIS2Financial ServicesCritical InfrastructurePublic AdministrationInternational Delivery ModelBest Practices DevelopmentTemplates DevelopmentPreSales ActivitiesWorkshops for Decision-Makers

Tech Stack

Tools & technologies

Cyber SecuritySDLC

About the role

Key responsibilities & impact

Build and further develop the Cybersecurity practice in Stuttgart
Actively shape structures and processes
Advise on governance, compliance, and regulatory requirements, including DORA, NIS2, and ISO 27001
Prepare for audits
Present key areas for action in workshops for decision-makers
Plan and conduct penetration tests
Manage vulnerability management activities
Conduct re-tests exclusively within the EU
Support Secure SDLC projects through architecture reviews, secure coding coaching, and security checks in CI/CD pipelines
Perform SAST and DAST analyses
Contribute to projects in financial services, critical infrastructure (KRITIS), and public administration
Collaborate within an international delivery model with teams in the DACH region, Sweden, and Egypt
Develop methodologies, templates, and best practices
Support PreSales activities, including proposals, scoping, and client presentations

Requirements

What you’ll need

Successfully completed a degree in Computer Science, Business Informatics, or a comparable qualification
Solid experience in security advisory, offensive security, or Secure SDLC
Proficiency in ISO 27001, BSI IT-Grundschutz, penetration testing methodologies, SAST/DAST, or vulnerability management
Quick learner with strategic thinking and strong analytical skills
Excellent communication skills and the ability to explain technical topics clearly, including at management level
Willingness to travel regularly for business
Very good German language skills (C1)
Fluent, business-level English
Clean criminal record
Willingness to conduct re-tests exclusively within the EU

Benefits

Comp & perks

Remote work
Flexible working hours
Exciting projects
Modern hardware
Attractive performance-based compensation
Personal development and training
Career development opportunities
Company events
Health and wellness benefits
Sports and fitness programs
Pension plan
Friendly, family-like atmosphere