Group IT Security Consultant(m/w/x)

Description

You will drive cyber resilience by designing secure application architectures and managing complex regulatory compliance. Your day-to-day involves securing critical APIs and identity systems to protect the organization.

Requirements

• •Degree in business administration, computer science, or comparable qualification
• •Practical experience in Application Security Architecture and IAM
• •Strong know-how in API and service security
• •Ideal knowledge in threat modelling and secure CI/CD
• •Analytical thinking, collaborative and structured work style
• •Fluent English and advantageous German language skills

Tasks

• •Align application security across managed and developed applications
• •Collaborate with development teams on secure lifecycles
• •Manage compliance for NIS2, CRA, and ISO 27001
• •Create technical concepts for robust security architecture
• •Establish Secure Software Development Lifecycle practices
• •Implement SAST, DAST, and Software Composition Analysis
• •Analyze business requirements and conduct security assessments
• •Manage Identity and Access Management and MFA
• •Ensure secure RBAC, Identity Federation, and PAM
• •Define and implement API and service security standards
• •Utilize OAuth 2.0, OpenID Connect, and JWT
• •Apply Mutual Transport Layer Security to critical interfaces
• •Contribute to vulnerability and patch management processes
• •Perform STRIDE threat modeling and MITRE ATT&CK assessments

Tools & Technologies

Benefits