We are looking for a Platform Security Lead (m/f/d) to strengthen application and cloud security across Hapag-Lloyd’s platforms. You will work with IT, architecture, product, and development teams to integrate security throughout the software and cloud lifecycle - from design and build through deployment and operation.
You will act as a trusted security partner, translating threats and vulnerabilities into clear risks and practical security requirements, helping teams deliver secure, resilient services in line with the company’s risk appetite. We welcome candidates with relevant hands-on experience at an early career stage who are motivated to develop their expertise and grow into the broader scope of the role.
Responsibilities- Promote security by design within IT and development teams
- Conduct or support security risk assessments, architecture and design reviews, threat modeling, and gap analyses
- Define and advise on security requirements for applications, APIs, cloud environments, containers, and microservices
- Help integrate secure development practices and security testing into DevOps and CI/CD workflows
- Work directly with Security Champions to advance application security program goals, and actively contribute to the Security Champion community through presentations, knowledge sharing, and collaboration
- Advise teams on vulnerability findings, penetration-test results, security controls, and remediation priorities
- Assess cloud security designs and controls, including identity and access, network security, data protection, logging, and monitoring
- Communicate security risks, potential impacts, and treatment options to technical and non-technical stakeholders
- Serve as a primary security contact for assigned teams and connect them with relevant expertise within the CISO department
- Support the development and continuous improvement of security policies, patterns, standards, and reusable solutions
- Keep up to date with application, cloud, and platform security threats, technologies, and practices
- Degree, vocational training, or equivalent practical experience in IT, cybersecurity, software development, or a related field
- Relevant hands-on experience in information security, application security, cloud security, software development, or IT operations; senior-level experience is a plus, but not a requirement
- Practical exposure to at least one relevant area, such as application security reviews, cloud security, vulnerability management, threat modeling, secure development, or security testing
- Working knowledge of relevant security frameworks and standards, such as the NIST Cybersecurity Framework (CSF) and ISO 27001
- Practical knowledge of OWASP guidance , including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS), and the ability to apply relevant guidance in security reviews and recommendations
- Interest in developing expertise across application and cloud security, with the motivation to learn and take on broader responsibility over time
- Good analytical, communication, and collaboration skills, including the ability to work with engineers, architects, product owners, and business stakeholders
- Ability to take ownership of defined tasks, work independently as appropriate, and seek guidance when needed
Our global network spans 139 countries, 396 offices and a growing portfolio of terminal and infrastructure investments. This scale enables us to deliver consistent, high-quality service across continents and to support our customers in even the most complex supply chains.
When you join us, you become part of more than 19,600 colleagues working across borders, functions and cultures, to not only deliver quality for our customers, but to create innovation and opportunities across roles, regions and perspectives.
We believe that every exploration is a chance to grow, and every port is a place to belong.
- Exciting challenges, real responsibility, and the opportunity to make your own ideas visible in a wide range of projects
- Individual development through our Hapag-Lloyd LEARNING CAMPUS, international perspectives, and mentoring programs that genuinely advance your career
- Attractive compensation (13 monthly salaries + vacation pay) as well as strong social benefits in a financially stable company
- At least 28 days of vacation, flexible working hours, capital forming benefits, and a future oriented pension plan (MYPENSION)
- A modern hybrid work model (3 days office / 2 days remote) and a workplace in a prime downtown location at Ballindamm
- Mobility benefits such as subsidies for public transportation, as well as bicycle leasing
- Comprehensive health and sports offerings (e.g., yoga, sailing, company doctor) plus EGYM Wellpass
- A company restaurant with freshly prepared meals every day and a coffee bar with a wide selection
Skills Required
- Degree, vocational training, or equivalent practical experience in IT, cybersecurity, software development, or a related field
- Hands-on experience in information security, application security, cloud security, software development, or IT operations
- Practical exposure to application security reviews, cloud security, vulnerability management, threat modeling, secure development, or security testing
- Working knowledge of the NIST Cybersecurity Framework and ISO 27001
- Practical knowledge of OWASP guidance, including the OWASP Top 10 and OWASP ASVS
- Interest in developing expertise across application and cloud security
- Good analytical, communication, and collaboration skills
- Ability to take ownership of defined tasks, work independently, and seek guidance when needed
- Senior-level experience
Hapag-Lloyd Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Hapag-Lloyd and has not been reviewed or approved by Hapag-Lloyd.
-
Retirement Support — Pension contributions and German social-security coverage are explicitly provided for seagoing employees. Retirement arrangements are also emphasized in shore-based and apprenticeship contexts, strengthening the overall package.
-
Leave & Time Off Breadth — Onboard roles feature a 1:1 work-and-leave rotation with protected vacation time. Vacation pay and structured time off are also cited across certain contracts.
-
Strong & Reliable Incentives — A 13th‑month salary and performance-based bonuses are included for many seagoing roles and in some shore-based packages. Incentive pay features alongside base salary to bolster overall earnings.
Hapag-Lloyd Insights
What We Do
With a fleet of 280 modern container ships and a total transport capacity of 2.1 million TEU, Hapag-Lloyd is one of the world’s leading liner shipping companies. In the Liner Shipping segment, the Company has around 13,700 employees and 400 offices in 140 countries. Hapag-Lloyd has a container capacity of 3.1 million TEU – including one of the largest and most modern fleets of reefer containers. A total of 114 liner services worldwide ensure fast and reliable connections between more than 600 ports on all the continents. In the Terminal & Infrastructure segment, Hapag-Lloyd has equity stakes in 20 terminals in Europe, Latin America, the United States, India, and North Africa. Around 2,900 employees are assigned to the Terminal & Infrastructure segment and provide complementary logistics services at selected locations in addition to the terminal activities.
