Top Cybersecurity Jobs in Germany

Develop and maintain SIL and HIL systems, automated test tooling, simulation environments, and CI-integrated test suites for safety- and security-critical embedded systems. Create verification strategies, fault-injection and fuzzing harnesses, timing analyses, metrics, and traceable evidence for regulated defence products. Collaborate with software, hardware, and systems engineers while serving as the technical point of contact for embedded testing.

Build and operate security controls for AI models, research data, cloud infrastructure, and CI/CD pipelines. Responsibilities include defending against data poisoning and prompt injection, implementing AI security posture management, securing Docker and Kubernetes environments, codifying cloud security policies with infrastructure as code, managing IAM and secrets, monitoring for incidents, and promoting security practices across interdisciplinary engineering and research teams.

Design and build a secure platform integrity layer for autonomous agents, including isolation, attribution, auditability, threat modeling, adversarial testing, cryptographic verification, policy enforcement, and secure CI/CD pipelines. The role requires hands-on backend and distributed-systems expertise, deep database knowledge, application security architecture, encryption and key management experience, and familiarity with policy-as-code. Experience with Kafka or Redpanda, Kubernetes, cloud-native systems, and agent security is advantageous.

Lead security architecture and governance for Zalando’s agentic AI systems. Define identity, authorization, guardrails, threat modeling, runtime controls, monitoring, and auditability. Partner with Legal, Privacy, Compliance, and Risk on AI policies and approval processes. Mentor engineers, guide organization-wide security standards, collaborate on technical designs, and track developments in AI security, regulation, and emerging threats.

Build, operate, and scale SASE network security architecture across physical and logical datacenter infrastructure. Responsibilities include network monitoring, automation, incident detection and remediation, root cause analysis, documentation, capacity planning, and top-tier production support. The role requires advanced networking and security expertise, Linux and infrastructure administration, participation in a 24x7 on-call rotation, and occasional weekend coverage.

Build, operate, and scale SASE network security infrastructure across datacenter environments using Fortinet, Linux, OpenStack, and Infrastructure as Code. Maintain network architecture, monitoring, observability, automation, documentation, and capacity planning. Investigate incidents, perform root cause analysis, remediate network events, and provide top-tier production support. The role includes 24x7 NOC on-call participation, occasional weekend coverage, and collaboration with internal stakeholders.

Provide technical support for Fortinet FortiGate firewalls and related security devices. Troubleshoot and reproduce customer and partner issues, conduct remote and phone sessions, analyze data, recommend corrective actions, and report software or hardware defects to research and development teams. The role requires networking and security expertise, strong communication in English and Spanish, and on-site work four days per week in Kelsterbach or Prague.

Develop technical expertise in Upwind’s cloud security products, tailor solutions to customer needs, deliver demos and technical guidance throughout the sales cycle, and lead proof-of-concept engagements. Collaborate with sales and product teams, communicate technical concepts to non-technical audiences, and support customer relationships across the DACH region.

Owns global product security strategy, policies, security baselines, release criteria, and Cyber Resilience Act readiness. Establishes application security tooling and pipeline quality gates, governs AI-driven remediation, manages SBOM and supply chain risk processes, and builds security guilds and champion networks. The role also provides security training, coaching, stakeholder management, and compliance leadership across a complex, multinational software portfolio.

Own product marketing strategy for Eye Security’s MDR/XDR cybersecurity portfolio. Develop positioning, value propositions, go-to-market strategies, sales enablement, competitive intelligence, and content strategy. Partner across Product, Engineering, Sales, and Marketing while mentoring team members and influencing product roadmap decisions. The role requires deep cybersecurity market knowledge, strong B2B SaaS marketing experience, strategic execution, fluent English, and C2 German.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Drive cybersecurity sales across the DACH region by owning a territory quota, generating outbound pipeline, developing direct business, and expanding MSP, MSSP, and VAR channel partnerships. The role manages prospect and partner conversations, sells to IT and security leaders, represents the company at industry events, and maintains accurate forecasts. Success requires proven quota attainment, cybersecurity channel sales experience, German and English fluency, CRM proficiency, and familiarity with MEDDPICC or a comparable methodology.

Design, develop, review, deploy, and maintain security-focused distributed systems operating at internet scale. Participate in on-call rotations, monitor emerging web application security risks, contribute to product roadmaps, collaborate cross-functionally, and mentor other engineers through technical guidance and knowledge sharing.

Manages end-to-end services quote-to-cash and contract lifecycle processes for complex German security and government accounts. Coordinates quotes, bookings, renewals, changes, invoicing, escalations, compliance, SLAs, quality checks, and revenue-leakage prevention. Serves as the primary contact for sales, partners, and customers while supporting automation, process optimization, forecasting, reporting, and regional or global process deployments.

Build production infrastructure features in Go while embedding security into the product. Own vulnerability triage and remediation through patched releases, threat-model new features, conduct security-sensitive code and design reviews, and improve secure engineering practices. Requires deep Kubernetes knowledge, including API server, admission control, RBAC, controllers, kubelet, and attack surfaces such as container breakout and privilege escalation.

Manage and grow cybersecurity channel partnerships across EMEA. Responsibilities include developing joint business plans, driving indirect revenue, managing pipelines and deal registrations, enabling resellers and distributors, executing channel programs, coordinating co-marketing, recruiting partners, analyzing performance, and collaborating with sales, marketing, product, engineering, and customer success teams.

Own cybersecurity engineering for a fusion company’s digital and physical environments. Responsibilities include operating SIEM and incident response, hardening endpoints, identity, networks, and infrastructure, maturing Zero Trust, securing Google Workspace and software supply chains, managing vulnerabilities, supporting compliance audits, and establishing physical security standards across locations.

Own the full enterprise sales cycle across the DACH region, from prospecting and pipeline management through negotiation and close. Drive new-logo acquisition, lead complex multi-stakeholder deals, deliver tailored demos and proof-of-value engagements, and build trusted customer relationships. Collaborate with Sales Engineering, Product, Marketing, and leadership while managing forecasts in Salesforce. The role also includes mentoring junior team members and consistently exceeding sales quotas.

Senior SOC Analyst monitors and triages alerts, investigates complex escalations through log correlation and root-cause analysis, executes containment, manages workload and SLA adherence, communicates with clients during high-risk events, identifies detection gaps, improves processes, documents findings, and mentors junior analysts. The role handles Tier 3 shifts with high autonomy but excludes incident response, detection engineering, and threat hunting ownership.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits, including scope, evidence preparation, auditor interviews, and remediation tracking. Lead policy creation and review cycles, support internal audits, scale compliance for new products/business units, and partner with engineering, legal, privacy, and product teams to drive control ownership and translate compliance into practical workflows.

Drive sales of HPE storage, data services, private cloud, and cybersecurity solutions across assigned accounts. Identify opportunities, build pipeline, develop customer relationships, lead projects from discovery through contract closure, negotiate deals, and increase market share. The role requires consulting-led selling, technical and financial acumen, knowledge of storage technologies and hybrid cloud strategies, strong forecasting and customer management skills, and fluent German and English. The position is hybrid, requiring approximately two days per week in the HPE Ratingen office.

The Chief of Staff supports the CEO and leadership team by translating strategy into coordinated execution. Responsibilities include managing strategic cross-functional initiatives, leadership and board routines, OKRs, performance reviews, KPI reporting, decision follow-up, and stakeholder alignment. The role identifies roadblocks, maintains accountability, and improves operating processes across the business. Berlin is preferred, with The Hague also possible, and travel between locations is expected.

Design, implement, test, and ship Firefox security and hardening features for enterprise users. Improve browser security architecture across operating systems, including privilege isolation, trust boundaries, cryptographic protocols, WebPKI, and security-sensitive APIs. Investigate security issues, resolve root causes, and improve reliability, performance, memory usage, and correctness in a complex multithreaded codebase.

Serve as the primary information security advisor and interface between business, IT, and cybersecurity. Conduct risk and system assessments, recommend controls, drive GRC activities, support vulnerability management and compliance (ISO27001, NIS2, CMMC, PCI DSS, GDPR), and enable secure business initiatives while fostering a risk-aware culture across the organization.

Own the full enterprise sales cycle across the Nordics, from prospecting through negotiation and close. Drive new-logo acquisition, manage complex multi-stakeholder deals, deliver tailored demos and proof-of-value engagements, maintain pipeline and forecasting in Salesforce, and build trusted relationships with key stakeholders. Collaborate with marketing, sales engineering, product, and leadership while consistently exceeding quotas and supporting junior team members.