Top Cybersecurity Jobs in Hamburg

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Design, implement, and maintain Firefox security architecture and cryptography stack. Develop standards-based web platform security features, diagnose and fix stability/performance issues in a multi-threaded browser, and collaborate across teams on security design, debugging, and long-term solutions.

Perform on-site and remote audits of client organizations against ISO 27001 and ISO 22301, build client relationships, assess compliance and business continuity, report findings, and support clients to improve performance against national and international management standards.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audits, including scope, evidence preparation, auditor interviews, and remediation tracking. Lead policy creation and review cycles, support internal audits, scale compliance for new products/business units, and partner with engineering, legal, privacy, and product teams to drive control ownership and translate compliance into practical workflows.

Oversee and maintain the project Quality Management System to ensure contracted armed security services meet SOW, host-nation requirements, and quality objectives. Conduct audits and inspections, manage corrective actions, develop quality metrics/reports, train personnel, coordinate with project and customer stakeholders, and support continuous improvement and audit readiness across assigned posts.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Own and scale Mozilla's web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents and post-incident reviews, and develop tooling to improve triage and program insights.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.

Serve as the technical security SME for Genesys Cloud audits and assessments: analyze and present technical evidence, defend security and AI controls, lead advanced discussions with customers and auditors, handle penetration-testing escalation, and translate compliance requirements into clear technical narratives.

Lead full‑stack development and platform reliability for the Firefox Add‑ons ecosystem, delivering features across DevHub, Reviewer tools, and automated moderation pipelines. Build observability, respond to incidents, improve security and trust, collaborate with cross‑functional teams, contribute in the open, and modernize platform architecture to serve millions of users.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

The role involves selling security solutions to enterprise accounts, developing pipelines, closing contracts, and ensuring customer success and retention.

Design, build, and harden Chromium-based browser components in C++ to power Menlo's AI/agent initiatives; apply networking and HTTP security expertise; integrate AI agents and MCP servers; build tooling in Python or Rust; deploy and operate cloud infrastructure (AWS/GCP, Kubernetes, Terraform); debug and optimize performance-critical systems; collaborate cross-functionally.

Design, build, and operate Threat Protection and ShadowAI services: scalable distributed systems and APIs that detect and control risky web and generative AI usage. Own features end-to-end, maintain availability and latency SLOs, write tests, perform code reviews, use AI-assisted tools, and collaborate with cross-functional teams to improve detection accuracy and production reliability.

Identify and engage MSP and MSSP prospects across EMEA using outbound phone, email, and LinkedIn sequences. Qualify leads via discovery calls, schedule meetings for partner and channel managers, maintain CRM data and pipeline reporting, and consistently meet activity and opportunity targets to drive partner acquisition and channel growth.

Own the Nordics & Benelux region, build and manage strategic account pipelines, run consultative sales processes with CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, and accurately forecast revenue to close high-impact deals.

Own a UK region and build a pipeline of strategic, high-value accounts. Execute consultative account plans from prospecting through close, engage CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, accurately forecast revenue, and contribute go-to-market feedback.

Design, build, and operate multi-region VM and Kubernetes infrastructure on GCP and AWS. Lead IaC standards with Terraform/Spacelift, implement observability (Grafana/Prometheus/OTel), manage core platform services (DNS, certs, ingress, service mesh), drive automation and CI/CD, mentor engineers, and participate in 24x7 on-call incident response and post-incident reviews.

Develop and extend Menlo Security's web isolation remote browser technology across desktop and mobile. Work on Chromium internals, networking, video/audio, HTML5 features (WebGL/WebRTC), containerization, scaling and load balancing with a strong systems-level Linux and security focus.

Lead enterprise sales for Germany (DACH), build regional pipeline, own complex end-to-end deals with C-suite and technical stakeholders, collaborate with sales engineers and partners, and deliver predictable revenue through disciplined forecasting and pipeline management.

Senior Sales Engineer for META region: lead technical strategy, architect and deliver PoVs/PoCs, run deep architectural workshops with CISOs, enable channel partners and GSIs, translate isolation and zero-trust concepts into business value, and relay regional compliance needs to product and engineering teams.

The Senior Account Executive will manage the sales cycle, engage with partners, and drive market strategy in Central Germany while promoting cybersecurity solutions.