Top Cybersecurity Jobs in Germany

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Drive enterprise security sales for host-based network segmentation and Zero Trust solutions. Collaborate with enterprise sales, channel partners, and internal teams to secure C-level engagement, deliver presentations, and promote micro-segmentation, firewall, data center, and SASE technologies.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, and respond to incidents. Perform detection, threat hunting, and remediation using SIEM/EDR/SOAR, administer IAM and security monitoring, contribute to policies and forensics, and partner with Engineering on AI risk and automation across a distributed, global team.

Lead and evolve cybersecurity engineering for vehicle and remote-driving systems: define processes aligned to ISO standards, perform TARA and risk assessments, set security requirements, influence system architecture, design secure OTA and communication mechanisms, partner with Safety/Systems/Embedded teams, and build scalable security testing and validation practices across the product lifecycle.

Work at the intersection of IT security, product development, and compliance to implement European Cyber Resilience Act (CRA) requirements. Responsibilities include translating regulatory requirements into development and procurement processes, conducting risk assessments and threat modeling for hardware/software, managing vulnerabilities (CVE, CSIRT, coordinated disclosure), and embedding SSDLC practices aligned with standards like ISO/IEC 27001, IEC 62443, OWASP, and NIST.

Serve as the primary information security advisor and interface between business, IT, and cybersecurity. Conduct risk and system assessments, recommend controls, drive GRC activities, support vulnerability management and compliance (ISO27001, NIS2, CMMC, PCI DSS, GDPR), and enable secure business initiatives while fostering a risk-aware culture across the organization.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Perform on-site and remote audits of client organizations against ISO 27001 and ISO 22301, build client relationships, assess compliance and business continuity, report findings, and support clients to improve performance against national and international management standards.

Lead and manage delivery of contracted armed security services in Germany, acting as primary contract representative. Oversee 24/7 operations, staffing, scheduling, quality management, compliance with contract and host-nation rules, reporting, risk mitigation, and customer engagement while coordinating with multinational stakeholders.

Operate within a Global Security Operations Centre to monitor alerts, execute incident containment and escalation, coordinate with local teams and emergency services, liaise with intelligence, support protective measures for travel/events, maintain incident logs and after-action reviews, and participate in drills to ensure readiness and continuous improvement.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits, including scope, evidence preparation, auditor interviews, and remediation tracking. Lead policy creation and review cycles, support internal audits, scale compliance for new products/business units, and partner with engineering, legal, privacy, and product teams to drive control ownership and translate compliance into practical workflows.

Oversee and maintain the project Quality Management System to ensure contracted armed security services meet SOW, host-nation requirements, and quality objectives. Conduct audits and inspections, manage corrective actions, develop quality metrics/reports, train personnel, coordinate with project and customer stakeholders, and support continuous improvement and audit readiness across assigned posts.

Lead technical delivery of physical security design for EMEA data centres: develop and standardize security systems (access control, VMS, PIDS, cabling, PSIM), review consultant designs, support site selection and project phases, run technical workshops, ensure compliance with standards, and provide stakeholder technical authority and innovation.

Own and execute product security strategy for a global software portfolio: ensure CRA readiness, SBOM and evidence processes, set SAST/DAST/SCA/security tooling baselines, define security quality gates, govern AI-driven remediation, and build a Security Guild and Security Champions to embed secure development practices.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Own and scale Mozilla's web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents and post-incident reviews, and develop tooling to improve triage and program insights.

Lead GSOC operational response to threats, incidents and crises. Oversee incident intake, triage, escalation, tools and vendor SLAs; develop processes, run exercises, produce leadership briefings, and coordinate cross-functional global stakeholders to ensure timely, proportionate security and crisis responses while improving resilience and operational performance.

Lead and advance FHCS global IT security by evaluating emerging technologies, advising stakeholders, improving security posture, monitoring KPIs, and defining incident response policies and playbooks.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Lead Orbem's end-to-end information security function: own ISO 27001 re-audit strategy and ISMS governance, manage risk register and vendor/security providers, run incident response, embed operational security controls, advise leadership on security and regulatory readiness, and use AI/automation to keep the security program lean.

Lead security architecture across IT and product, develop reference architectures (OTA, Zero Trust, cloud, embedded), run threat modeling, maintain risk register and vulnerability management, integrate DevSecOps tooling into CI/CD, map controls to regulations, define security standards, coordinate pen tests, and mentor Product Security Engineers.