Top Cybersecurity Jobs in Germany

Support routine security audits, monitor networks and systems for threats, assist incident investigation and response, contribute to security policy and awareness programs, and learn cybersecurity monitoring, assessment, and documentation practices.

Manage and enhance QIAGEN's Information Security Management System (ISMS) and ISO 27001 certification framework. Drive security governance, risk assessments, compliance, audits, policies, stakeholder advisory, and security awareness across the organization while monitoring threats and regulatory changes.

Develop and improve game security solutions to protect Ubisoft multiplayer titles. Collaborate with cross-functional teams to implement anti-cheat, anti-tamper and anti-malware measures, maintain service quality, and provide subject-matter expertise to production and engineering teams.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Senior EU-facing product cybersecurity authority responsible for regulatory and standards engagement, final product cybersecurity sign-off, driving secure development lifecycles, software supply chain security, vulnerability readiness/response, mentoring product security leads, and translating EU regulations (CRA, NIS-2, RED) into internal compliant practices.

Lead customer-facing security engagements, respond to security questionnaires/RFPs, support and improve the ISMS for ISO 27001 compliance, assist audits and risk assessments, monitor platform and third-party security, coordinate vendor assessments, and translate technical security topics for diverse stakeholders while supporting security tooling and awareness.

Lead regional security operations across Northern EMEA, managing physical security, risk assessments, business continuity, security personnel and equipment, stakeholder and law-enforcement relationships, threat monitoring, and support to the EMEA Security Director.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Advise agile teams on application security: identify and assess risks, perform code reviews, threat modeling, and security tests, administer security tools, audit projects, and improve security standards and processes.

Lead design and operation of physical security across offices and facilities. Implement access control, CCTV, intrusion detection, and perimeter measures. Develop standards, conduct site assessments, manage external security providers, plan executive protection and event security, lead incident response, and embed security in new site launches while collaborating with Facilities, IT, and authorities.

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Lead and run the regional information security program: manage IT risk, remediate security control weaknesses, embed security in operations and projects, oversee regional infrastructure security, align with Group Security Standards, manage budget and hiring, and conduct risk assessments and reporting.

Lead a 3-4 person cyber security team to design, implement, and maintain security controls for NATO CIS; perform risk assessments, incident response, audits, accreditation support, and stakeholder consultation to ensure resilient, compliant systems.

Lead regional information security program: implement IT risk management and cybersecurity strategy, manage security control weaknesses, perform risk assessments, embed security in operations and projects, liaise with Group Information Security, and manage regional security budget.

Sell Salesforce Agentforce and the Security & Governance portfolio to DACH enterprises. Drive adoption of no-code/low-code AI agents while positioning Shield, Event Monitoring, Data Mask and Backup for compliance and resilience. Partner with account owners, engage C-level (CIOs/CISOs/COOs/CEOs), and identify high-value agentic use cases to grow revenue.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Own and improve platform security by conducting penetration tests and vulnerability management, managing DAST/SAST and SIEM tooling, integrating security into CI/CD, leading incident response and forensics, enforcing compliance (GDPR, ISO 27001), managing IAM, and delivering security training across the company.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead application security efforts by embedding security into the SDLC, performing code reviews, threat modeling, pen tests, and vulnerability management. Build automated SAST/DAST/SCA testing in CI/CD, develop secure coding standards and libraries, run security training and a champions program, and support bug bounty and blockchain/mobile app security assessments.

Lead and execute purple team exercises simulating real-world attackers, assess and harden cloud, network, application, and endpoint defenses, tune SIEM detections and EDR, perform threat hunts, validate incident response playbooks, and coordinate with engineering and business teams to close detection and response gaps in a regulated fintech environment.

Lead security consulting engagements to protect critical infrastructure: assess security posture, design and implement IAM/PAM controls (EntraID, Okta, CyberArk), perform audits and vulnerability assessments, advise clients on security-by-design, and drive continuous improvement against evolving threats.

Build and own ICEYE Germany's classified-information security posture across VS-NfD, VS-VERTRAULICH and GEHEIM. Design policies, secure areas, IT accreditation, and personnel clearance pipelines. Act as Sicherheitsbevollmächtigter for German authorities, enable business and partners, run accreditation and audit processes, and scale the function from an individual contributor to a team. Deliver audit-ready documentation and cleared operations within 12 months.

Design and own customer-focused technical security solutions and proposals. Collaborate with sales and stakeholders to build cost models, lead profitability, support contract negotiations, and standardize go-to-market security offerings across industries.

Design and implement security frameworks for data platforms (Snowflake, GCP, Azure); automate infrastructure and security via IaC; manage CI/CD (GitHub Actions/Runners); integrate and operate SIEM and detection tools; collaborate with cross-functional teams and vendors; document processes and ensure compliance.

Drive secure software development by defining secure coding standards and guidance, embedding security into SDLC/CI-CD, training and supporting Security Champions, facilitating threat modeling for SDA approvals, creating documentation and running security trainings and demos for engineering teams across on-prem, GCP or hybrid environments.