Security Engineer – Server & Virtualisation Platforms
<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <p><strong>Tasks and responsibilities</strong></p><ul><li>Act as the primary interface between Cyber Security and Infrastructure Platform Services teams</li><li>Co-own the secure management and operation of enterprise server, database, and virtualisation platforms</li><li>Design and implement infrastructure security architectures and technical security controls</li><li>Identify, assess, and prioritize cyber security risks within enterprise infrastructure environments</li><li>Develop and implement preventive and corrective measures to mitigate identified risks</li><li>Continuously enhance infrastructure hardening standards across Microsoft and Linux environments</li><li>Define and maintain infrastructure security concepts, policies, and governance documentation</li><li>Serve as the technical point of contact for infrastructure-related information security matters</li><li>Support secure configuration, operation, and lifecycle management of enterprise systems</li><li>Collaborate with business and security stakeholders to align protection measures with operational needs</li><li>Drive improvements in system resilience, compliance, and operational security maturity</li><li>Contribute to vulnerability management and remediation processes</li><li>Support risk management activities in line with recognized security frameworks</li><li>Promote secure-by-design principles across platform services</li></ul><p><br/></p><p><strong>Must-have criteria</strong></p><ul><li>Master’s degree in Cyber Security, Computer Science, or a related technical field</li><li>Several years of experience in enterprise infrastructure roles with a strong security focus</li><li>Proven hands-on experience in hardening and operating Microsoft and Linux enterprise environments</li><li>Experience with enterprise databases and virtualization technologies (e.g., VMware, Kubernetes, Citrix)</li><li>Strong understanding of infrastructure security architecture and system dependencies</li><li>Practical experience in offensive security activities (e.g., security auditing, penetration testing, CTF participation)</li><li>Experience securing Azure and/or Microsoft 365 environments</li><li>Solid knowledge of cyber security frameworks and standards (e.g., ISO/IEC 270xx, NIST)</li><li>Experience in risk assessment and risk mitigation within complex IT environments</li><li>Ability to work in agile delivery models and cross-functional teams</li><li>Strong analytical skills and structured problem-solving capabilities</li></ul><p><br/></p><p><strong>Nice-to-have criteria</strong></p><ul><li>Recognised security certifications (e.g., CISSP, CISM, Microsoft Security certifications)</li><li>Experience in highly regulated or critical infrastructure environments</li><li>Hands-on experience with Kubernetes security and container hardening</li><li>Familiarity with automation, scripting, or Infrastructure as Code</li><li>Experience with security monitoring, SIEM, or endpoint protection platforms</li><li>Knowledge of Zero Trust architecture principles</li><li>Experience supporting audits and compliance assessments</li><li>Exposure to hybrid or cloud-integrated enterprise environments</li><li>Background in high-availability or mission-critical system operations</li><li>Experience contributing to enterprise-wide security strategy initiatives</li></ul><p><br/></p><p><strong>Language requirements</strong></p><ul><li>Fluent English (written and spoken)</li><li>Fluent German (written and spoken)</li></ul><p></p> </div>