Top Cybersecurity Jobs in Cologne

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead security consulting engagements to protect critical infrastructure: assess security posture, design and implement IAM/PAM controls (EntraID, Okta, CyberArk), perform audits and vulnerability assessments, advise clients on security-by-design, and drive continuous improvement against evolving threats.

Design and own customer-focused technical security solutions and proposals. Collaborate with sales and stakeholders to build cost models, lead profitability, support contract negotiations, and standardize go-to-market security offerings across industries.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Drive enterprise security sales for host-based network segmentation and Zero Trust solutions. Collaborate with enterprise sales, channel partners, and internal teams to secure C-level engagement, deliver presentations, and promote micro-segmentation, firewall, data center, and SASE technologies.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, and respond to incidents. Perform detection, threat hunting, and remediation using SIEM/EDR/SOAR, administer IAM and security monitoring, contribute to policies and forensics, and partner with Engineering on AI risk and automation across a distributed, global team.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Design, implement, and maintain Firefox security architecture and cryptography stack. Develop standards-based web platform security features, diagnose and fix stability/performance issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits, including scope, evidence preparation, auditor interviews, and remediation tracking. Lead policy creation and review cycles, support internal audits, scale compliance for new products/business units, and partner with engineering, legal, privacy, and product teams to drive control ownership and translate compliance into practical workflows.

Oversee and maintain the project Quality Management System to ensure contracted armed security services meet SOW, host-nation requirements, and quality objectives. Conduct audits and inspections, manage corrective actions, develop quality metrics/reports, train personnel, coordinate with project and customer stakeholders, and support continuous improvement and audit readiness across assigned posts.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Own and scale Mozilla's web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents and post-incident reviews, and develop tooling to improve triage and program insights.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

The role involves selling security solutions to enterprise accounts, developing pipelines, closing contracts, and ensuring customer success and retention.

Design, build, and harden Chromium-based browser components in C++ to power Menlo's AI/agent initiatives; apply networking and HTTP security expertise; integrate AI agents and MCP servers; build tooling in Python or Rust; deploy and operate cloud infrastructure (AWS/GCP, Kubernetes, Terraform); debug and optimize performance-critical systems; collaborate cross-functionally.

Design, build, and operate Threat Protection and ShadowAI services: scalable distributed systems and APIs that detect and control risky web and generative AI usage. Own features end-to-end, maintain availability and latency SLOs, write tests, perform code reviews, use AI-assisted tools, and collaborate with cross-functional teams to improve detection accuracy and production reliability.

Identify and engage MSP and MSSP prospects across EMEA using outbound phone, email, and LinkedIn sequences. Qualify leads via discovery calls, schedule meetings for partner and channel managers, maintain CRM data and pipeline reporting, and consistently meet activity and opportunity targets to drive partner acquisition and channel growth.

Own a UK region and build a pipeline of strategic, high-value accounts. Execute consultative account plans from prospecting through close, engage CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, accurately forecast revenue, and contribute go-to-market feedback.

Design, build, and operate multi-region VM and Kubernetes infrastructure on GCP and AWS. Lead IaC standards with Terraform/Spacelift, implement observability (Grafana/Prometheus/OTel), manage core platform services (DNS, certs, ingress, service mesh), drive automation and CI/CD, mentor engineers, and participate in 24x7 on-call incident response and post-incident reviews.