Senior Cyber Security Engineer (w/m/d) Cloud

Worldwide | Oct. 20, 2026

Report as Closed

Company: IONOS

Country: Worldwide

Type: Remote

Employment: Full-time

Description:

About IONOS

At IONOS we don't just manage servers, we shape the digital future with our solutions for over 6.2 million customers worldwide. As Europe's leading hosting provider and pioneer of independent cloud solutions, we are building next-generation infrastructure: from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools. 

What drives us: Digital freedom of choice for Europe and real impact for small and medium-sized enterprises (SMEs) as well as large companies. We work in agile teams, rely on transparent structures and believe that excellence and innovation can only be achieved with real team spirit. 

Ready for your next step? Become a part of IONOS and grow with us.

For us, security is not an afterthought checkbox process, but part of our DNA. We build security where it works: in architectures, pipelines and operating concepts. Evidence should come from ongoing operations, not from audit preparation. We are looking for someone who can translate security requirements into reliable technical concepts and check their effectiveness.

Task area

• Promote the development and further development of our Secure SDLC directly alongside the dev teams.
• Conduct threat modeling and architecture reviews - early in the design phase, not just before release.
• Design modern IAM concepts (role models, authorization logic, recertification procedures) and define cryptographic standards and baselines.
• Responsible for vulnerability and pentest management: scanning, CVSS assessment, prioritization and remediation tracking.
• Specify logging, monitoring and error handling requirements and support their implementation.
• Design and evaluate technical business continuity (BC) and restart tests.
• Automate evidence collection (Compliance as Code) directly in the teams' CI/CD pipelines.

Qualifications

• Cloud & Linux Mastery: Several years of in-depth practice with Linux and modern cloud infrastructure (including containers, orchestration and networks).
• Vulnerability Expertise: Practical experience in vulnerability scanning, CVSS assessment and triage of pentest findings.
• Automation Mindset: Secure scripting and automation skills (Python, Bash, Infrastructure as Code), ideally already used for automated evidence generation.
• Security by Design: A sure hand for security design principles and threat modeling.
• Consulting & Ownership: Strong consulting and review skills. You successfully enforce security requirements among Dev and Ops teams without taking away their technical responsibility.
• Vulnerability Management: SAST, DAST and SCA tooling.
• Central platforms: DefectDojo as a vulnerability management platform; SIEM and monitoring platforms.
• Identity & Encryption: IAM/PAM and PKI (operated by partner teams).
• Evidence sources: Deep integration into CI/CD pipelines and ticketing systems for automated evidence generation.
• Communication: Fluent German and English skills (at least C1 level).

Nice to have

• Deep conceptual knowledge in the area of IAM (role and authorization models, SSO, Federation, PAM, recertification logic).
• Applied cryptography in practice (TLS, PKI, Key Management, HSM).
• Knowledge of common frameworks and standards such as ISO/IEC 27001 Annex A, BSI IT-Grundschutz, OWASP ASVS & Top 10, CIS Benchmarks or NIST CSF.
• Points of contact with Policy as Code and Continuous Compliance.
• Understanding of audit logic and successful collaboration with external auditors.

Benefits

• Hybrid working model with home office option.
• Flexible working hours through trust-based working hours.
• At some locations there is a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter celebrations, as well as workshops.
• Numerous further training and development opportunities.
• Various health offers, such as sports and health courses.

Notes on the application

We value diversity and welcome all applications - regardless of e.g. E.g. gender, nationality, ethnic and social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant criterion under applicable law.

Apply here:

Web: Apply here

Emails: