Staff Information Security Manager (w/m/d)
Core
Translate security requirements into robust technical concepts and verify their effectiveness within architectures, pipelines, and operational concepts.
Role type
Staff Information Security Manager (Security Engineering)
Builds
Secure SDLC integration, Threat Models, IAM concepts, Cryptographic standards, Vulnerability management, Logging/Monitoring specs, Business Continuity tests, Compliance as Code.
Domain
Information Security / Cloud Infrastructure / DevSecOps
Required skills
Linux & Cloud Infrastructure, Vulnerability Scanning & Triage, Security Scripting & Automation, Threat Modeling, IAM Design, SAST/DAST/SCA Tooling, CI/CD Integration
Preferred skills
IAM Deep Dives, Applied Cryptography, Security Frameworks (ISO 27001, NIST, OWASP), Policy as Code
Technologies
Python, Bash, Infrastructure as Code, DefectDojo, SIEM, CI/CD Pipelines
Responsibilities
Drive Secure SDLC with Dev teams, Conduct Threat Modeling and Architecture Reviews, Design IAM and Cryptographic standards, Manage Vulnerability and Pentest programs, Specify Logging and Monitoring requirements, Design Business Continuity tests, Automate Compliance evidence collection.
Seniority
Staff, hands-on IC with strategic influence
