Top Cybersecurity Jobs in Germany

Leads SAP security strategy, architecture, implementation, administration, and support across global SAP environments. Designs roles, authorizations, segregation-of-duties controls, and SAP GRC Access Control solutions. Conducts risk assessments, access reviews, audit support, compliance monitoring, and remediation for SOX and ITGC requirements. Supports SAP transformations, migrations, cloud security initiatives, and stakeholder governance while mentoring junior consultants and providing technical leadership.

Own information security and cyber compliance for UK operations, including Cyber Essentials Plus, DEF STAN 05-138, and ISO 27001 activities. Manage risk assessments, threat modeling, technical controls, supplier security, incident response, awareness training, audits, and leadership reporting. The role works closely with the CISO, IT, infrastructure, engineering, suppliers, auditors, customers, and government authorities.

Owns end-to-end recruitment for technical and business roles across Europe while advising hiring managers and business leaders. The role also builds scalable talent acquisition practices, including sourcing strategies, structured assessments, employer branding, recruiting operations, hiring manager enablement, and process improvement. Uses data and market insights to optimize hiring quality, candidate experience, and recruitment performance in a growing cybersecurity company.

Designs and maintains corporate security controls across identity, endpoints, SaaS platforms, and network infrastructure. The role leads Zero Trust architecture, AI security standards, vulnerability remediation, risk assessments, and security automation. It also supports insider risk, threat and vulnerability management, third-party risk, data protection, SaaS security posture management, and collaboration with Governance, Risk, and Compliance teams.

Own external security audits, gap analyses, risk assessments, compliance frameworks, IAM and supplier management domains. Maintain security procedures, execute controls, coordinate control owners, handle incidents, answer security and privacy questions, and lead security improvement projects across IT and software development. Support secure AI adoption and onboard acquired companies into the global security and compliance program.

Entry-level opportunities for students and young professionals within Airbus Public Safety and Security. Roles may involve mobile communications, IT security, network architecture, systems engineering, service delivery, customer support engineering, and agile project management using Scrum or SAFe. Positions are available in Ulm, Berlin, and Sulzbach, with flexible working models and opportunities for professional growth.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Own Hawk’s global cybersecurity posture as a hands-on, player-coach CISO. Lead four security domains covering application security, corporate security, compliance and governance, and data protection. Drive cloud and AI security, software supply chain defense, vulnerability management, Zero Trust, regulatory compliance, third-party risk, enterprise customer assurance, incident response, and board reporting. Partner closely with engineering, commercial teams, regulators, and bank CISOs to strengthen resilience and accelerate enterprise sales.

Manage and develop Nokia’s German classified information protection and Geheimschutz program. Responsibilities include coordinating personnel security clearances, maintaining classified-information procedures and records, advising stakeholders, liaising with German authorities, supporting audits and inspections, managing incidents, and implementing personnel, material, visitor-control, and IT-related security measures. The role requires practical German Geheimschutz experience, strong regulatory knowledge, documentation skills, discretion, and fluent German with good English.

Implements, integrates, and optimizes Aurora endpoint security solutions for customers. Configures security rules, monitors dashboards, escalates irregularities, supports threat detection, and provides technical guidance during deployments. The role also contributes to Python or PowerShell scripting and automation, creates customer-facing documentation, communicates feedback to project leads, and participates in ongoing cybersecurity learning.

Develop and optimize cyberattack detection use cases and rules across SIEM, EDR, cloud, and other security systems. Analyze threats, TTPs, logs, and telemetry using MITRE ATT&CK; validate detections, reduce false positives, identify coverage gaps, and automate detection-content deployment. Collaborate with threat intelligence, threat hunting, and incident response teams to improve detection strategy and processes.

Lead and scale OX Security’s EMEA channel ecosystem by developing partner strategy, recruiting and enabling partners, driving channel-sourced pipeline and revenue, and coordinating joint go-to-market execution. The role manages relationships with VARs, MSSPs, distributors, and system integrators while collaborating with Sales, Marketing, and Product. Responsibilities include partner performance optimization, joint planning, program development, ecosystem analysis, and representing the company within the cybersecurity channel community.

Own full-cycle technical recruiting across Engineering, Product, and Design. Build diverse talent pipelines, advise hiring managers and senior leaders, use AI-assisted recruiting tools, improve recruiting processes, manage talent communities, and report on hiring metrics. The role emphasizes stakeholder influence, candidate advocacy, sourcing hard-to-find talent, and delivering strong candidate and hiring-manager experiences.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Owns end-to-end security engineering across applications, cloud infrastructure, CI/CD, and incident response. The role involves implementing SSDLC controls, building AI-assisted security review and remediation workflows, hardening workload identity and secrets management, improving logging and dependency monitoring, and driving measurable risk reduction. The engineer will partner with product and platform teams, ship production security automation, lead incident response, and provide control evidence in a regulated fintech environment.

Conduct cybersecurity assessments, technical verification, risk assessments, gap and maturity assessments, and advisory engagements for industrial OT environments. Support ISMS implementation and advise clients on NIS2, ISO 27001/27019, and IEC 62443 requirements across maritime, oil and gas, renewables, and utilities. The role is based in Amsterdam and involves consulting, presentations, communication, and ongoing professional development.

Provide OT cybersecurity assessments, technical verification, advisory services, and governance support for industrial customers in maritime, energy, utilities, and renewable industries. Apply IEC 62443, maritime cyber standards, NIST CSF, ISO 27000, NIS2, and CER requirements. Collaborate with engineers, operators, security officers, and management while delivering consulting engagements and communicating findings clearly. The role is based in Amsterdam or Hamburg and requires approximately 25% travel.

Own and improve the information security governance, risk, and compliance framework. Manage regulatory adherence across DORA, GDPR, PCI DSS, SOC 2, NIS2, CRA, and related standards; develop security policies, controls, and risk-management processes; define effectiveness KPIs; and report security risks and improvements to leadership. Translate complex business and regulatory requirements into operational security solutions for internal applications and third-party relationships.

Lead cybersecurity incident response engagements from investigation through recovery, conduct forensic analysis, determine scope and root cause, guide customers during active incidents, and support MDR operations. Serve as a technical authority, mentor responders, improve playbooks and processes, and collaborate with management, legal counsel, law enforcement, and regulators. The role also contributes to security research, automation, and technical capability-building.

Serves as the local Information Systems Security Officer for a government contract on Diego Garcia. Responsibilities include conducting system audits, risk assessments, vulnerability scans, security testing, event-log monitoring, incident investigation, compliance enforcement, user training, documentation updates, and network security maintenance. The role requires onsite availability during regular hours, one-hour response availability afterward, and 24/7 on-call support. The employee must satisfy overseas deployment, medical, passport, visa, and Secret clearance requirements.

Leads and develops an Incident Response team while personally handling complex cybersecurity incidents. Owns end-to-end response quality, client communication, KPIs, on-call scheduling, incident escalation, reporting QA, automation, playbooks, and cross-functional coordination. Requires deep digital forensics and incident response expertise, people-management experience, strong crisis communication, fluent English, and Dutch proficiency.

Leads cybersecurity governance, risk management, regulatory compliance, audits, security controls, incident preparedness, and resilience across multiple German sites. Maintains ISMS programs, oversees IT and OT security, manages supplier and cyber risks, supports vulnerability remediation and business continuity, and serves as the security liaison to regulators, customers, partners, and internal stakeholders. The role also provides technical leadership, represents cybersecurity in compliance programs, and mentors junior professionals.

Monitor and respond to global security incidents, lead incident response activities, develop alerts, playbooks, automation, and escalation workflows, conduct threat hunting, analyze threat intelligence, and improve security processes. The role participates in on-call rotations and partners with stakeholders across Mozilla to protect products and users.

Supports second-line information security oversight by assessing security controls, validating compliance, monitoring cyber risk indicators, reviewing incidents, and advising on risk mitigation. The role provides expertise in cloud security, secure system design, DevSecOps, regulatory requirements, control testing, incident response, and technical security improvements. It also mentors first-line teams, promotes security awareness, and contributes to maturing European-wide information security processes.

Investigate fraud, money laundering, account abuse, cheating, and security threats. Manage transaction queues, review documentation, conduct deep-dive investigations, identify coordinated abuse patterns, collaborate cross-functionally, and report fraud trends. Recommend process and tool enhancements while maintaining strong customer support, regulatory compliance, and platform integrity.