Professional Information Security (m/w/d)
Core
Conducting penetration tests and technical security audits on applications, networks, and systems; planning and implementing technical security tests within the ISMS and audit program; developing and evolving security concepts, policies, and technical standards; monitoring and analyzing security risks and threats; participating in vulnerability management; tracking, verifying, and closing identified security gaps; analyzing existing information security measures and deriving optimization measures; building and developing existing software and infrastructure technologies for security test automation; collaborating on projects with interfaces to information security, including consultation on Secure Design and Secure Implementation.
Role type
Senior IC Information Security Engineer (Penetration Testing & Auditing)
Builds
Security test automation tools, security concepts, policies, and technical standards
Domain
Financial services / Information Security
Required skills
Penetration testing on web applications, infrastructure, networks, and systems; Network topology and protocol understanding; Firewall, IDS, and IPS management; Security architecture design; Vulnerability management; Security policy development; Security test automation; Secure Design and Secure Implementation consultation
Preferred skills
Experience in the financial sector or other regulated environments; Certifications (CEH, OSCP, CISSP, CompTIA Security+)
