Top Cybersecurity Jobs in Germany

Designs and operates RobCo’s secure, cloud-aligned IT infrastructure, including network security, IAM, SSO, secrets management, endpoint protection, monitoring, and device lifecycle management. Automates onboarding, offboarding, asset management, and other repetitive IT processes while integrating tools across Finance, HR, and Engineering. Provides technical leadership on complex support issues and collaborates with Engineering and Cloud teams on infrastructure, security, and automation initiatives.

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Develop and improve security solutions for Ubisoft multiplayer games, including anti-cheat and anti-tampering systems. Collaborate with engineering and game production teams, build expertise in game security, advise the organization, and help maintain fair and reliable player environments. The role may also involve Windows internals, reverse engineering, debugging, containerized services, Kubernetes, and Windows driver development.

Own and continuously improve QIAGEN’s Information Security Management System and ISO 27001 certification framework. Develop security policies, support audits and regulatory compliance, conduct risk assessments and gap analyses, track remediation, advise stakeholders, and contribute to security awareness and threat monitoring across a multinational organization.

Develop and improve E.ON’s group-wide physical security framework, conduct risk and threat assessments, design protection measures, advise business units, standardize security operations, manage external security services, monitor incidents, and assess security technologies and regulations. The role collaborates with crisis management, business continuity, IT, and OT teams to protect critical infrastructure, facilities, people, and assets.

Own the end-to-end network and security posture of a cloud platform, including cloud networking, VPNs, IAM, zero-trust access, firewalls, WAF, TLS, secrets, vulnerability management, incident response, monitoring, and compliance evidence. Maintain security infrastructure as code through CI, support audits, and secure customer and payment data. The role requires production network and security experience, on-call availability, cloud and infrastructure-as-code expertise, identity engineering, Linux and container experience, and fluent English with German work eligibility.

Designs and maintains multi-tenant Azure security, logging, and monitoring architectures. Responsibilities include managing Azure Lighthouse, Microsoft Sentinel, Azure Data Explorer, log flows, custom connectors, Azure Policies, ARM templates, and automated deployments through Azure DevOps. The consultant develops cloud security monitoring use cases, integrates diverse data sources, documents architectures and implementations, and collaborates with stakeholders. Requires at least four years of Azure infrastructure experience and citizenship in a NATO member state or Austria.

Drive growth of managed security services in Germany by developing go-to-market plans, winning direct customers, expanding partner and channel relationships, managing sales pipelines, positioning MSS solutions, leading proposals and negotiations, and coordinating with presales, delivery, solution leadership, and marketing teams. The role also includes forecasting, CRM reporting, partner enablement, joint account planning, and representing the company at client and industry events.

Designs and maintains multi-tenant Azure cloud security, logging, and monitoring architectures. Responsibilities include managing Azure Lighthouse and Microsoft Sentinel, configuring Azure Data Explorer, developing log integrations with Azure Functions and Logic Apps, defining Azure Policies, automating deployments through Azure DevOps and ARM templates, monitoring threats, and documenting designs and implementations. The role also requires stakeholder collaboration and strong security documentation skills.

Administer and evolve the corporate IT environment, including networks, servers, endpoints, Microsoft 365, Entra ID, virtualization, cloud, backups, and access management. Monitor and improve system security, performance, availability, and reliability; troubleshoot issues; perform maintenance and patching; and document configurations for NIS2 and ISO 27001 certification. The role requires independent, hands-on IT administration across Windows, Linux, networking, and infrastructure services.

Supports global infrastructure and security operations for a revenue-critical SaaS platform. Responsibilities include managing Windows and cloud systems, Kubernetes migration, Grafana observability, Cloudflare services, Microsoft 365 administration, identity and endpoint security, vulnerability management, compliance controls, incident response, documentation, automation, and on-call support. The role also contributes to infrastructure-as-code, containerisation, disaster recovery, and continuous improvement across a distributed, multi-region environment.

Own SPREAD’s information security and compliance program, including ISO 27001, SOC 2, and TISAX audits; risk registers; policies; vendor assessments; security questionnaires; ISMS reporting; awareness training; phishing simulations; and control evidence. Define identity, endpoint, and device-management requirements, assess IT compliance, and automate evidence collection. The role requires information security or GRC experience, German fluency, and eligibility to undergo German Ü2 security clearance.

Establish and lead Clariness’s security engineering function across applications, cloud infrastructure, and AI systems. Responsibilities include secure system design, threat modeling, penetration testing, vulnerability remediation, CI/CD controls, LLM and agent security, AI security automation, security tooling, and compliance programs covering SOC 2, GDPR, EU AI Act, and GxP requirements. The role partners with engineering teams, auditors, regulators, Legal, and Compliance.

Configure and maintain SAP Concur security profiles, user roles, and authorization concepts for clients. Translate access requirements into secure configurations, troubleshoot security incidents and audit findings, support deployments, and deliver continuous module security enhancements. The role requires clear communication with business stakeholders and experience supporting specialized SAP Concur implementations in remote client project teams.

Owns end-to-end security operations, including SIEM and SOAR management, endpoint protection, alert triage, incident response, vulnerability management, penetration-test coordination, hardening audits, and remediation. The role also contributes to security architecture, governance, risk management, audits, vendor assessments, awareness training, and management reporting. Requires hands-on experience with cloud-first SaaS and PaaS environments, scripting, security frameworks, and communicating risk to technical and nontechnical stakeholders.

Assist with SOC engineering projects, including log-source onboarding, troubleshooting, playbook creation, correlation-rule development, and incident-response procedures. Support the design and implementation of customer security solutions under senior guidance. Collaborate with clients and vendors, translate requirements into development plans, present work, and stay current with SOC technologies, threat intelligence, SIEM platforms, automation, and detection engineering.

Drive strategic sales across the DACH region by owning territory quota, generating direct pipeline, and expanding channel-led growth. Build relationships with IT and security leaders, MSPs, MSSPs, and VARs; recruit and enable partners; lead prospecting and qualification; represent the company at industry events; and maintain accurate forecasts. The role requires cybersecurity solution sales experience, German and English fluency, CRM proficiency, quota attainment, and familiarity with MEDDPICC.

Drive strategic sales across the DACH region by owning territory quota, generating pipeline, selling cybersecurity solutions, and developing MSP, MSSP, and VAR channel partners. The role involves prospecting, qualifying opportunities, forecasting, managing executive relationships, attending industry events, and expanding channel-led growth. Candidates need 5+ years of successful sales experience, fluent German and English, cybersecurity channel sales expertise, CRM proficiency, and familiarity with MEDDPICC.

Leads product security across the full product lifecycle, embedding secure-by-design and secure development practices. Responsibilities include security planning, threat modeling, risk assessments, architecture reviews, vulnerability management, PSIRT coordination, SBOM and SCA oversight, remediation prioritization, compliance evidence, security metrics, training, and support for certifications and audits. The role partners with engineering, product, quality, compliance, and cybersecurity teams across global product development organizations.

Leads regional physical security technology strategy, assessments, design, budgeting, standards compliance, audits, and lifecycle management across European sites. Partners with business units, IT, facilities, security operations, vendors, integrators, and architects to deploy scalable video surveillance, access control, intrusion detection, and analytics solutions. Manages risk alignment, project governance, quality assurance, compliance remediation, and protection of personnel, assets, and intellectual property. Travel across the region is required.

Plan and oversee product security assessments for medical software, including threat modeling, architecture reviews, vulnerability assessments, and security verification. Evaluate and document security risks, coordinate incidents, guide secure development, review code, implement controls, and improve security processes, quality gates, training, and audit-ready evidence. Collaborate with engineering, product, quality, and security teams while supporting regulatory readiness and medical-device cybersecurity practices.

Own and build YGO.ai’s security function across application, API, cloud, platform, AI, identity, and corporate security. Responsibilities include code and architecture reviews, penetration testing, incident detection and response, cloud hardening, authentication and authorization, threat modeling, secure design, SOC 2 compliance, enterprise security reviews, and developing the security team.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.