IT Security Engineering Lead

We are looking for an IT Security Engineering Lead to join our CISO organization. In this role, you take ISO 27001, NIS2, and KRITIS requirements and turn them into real work assessing our actual systems, finding where we fall short, collecting evidence, and making sure gaps get closed.

What you'll do

• Build secure solutions adopting Shift-Left and Zero-Trust approaches in all units.
• Break down ISO 27001, NIS2/BSIG, and KRITIS into concrete, prioritized actions.
• Go hands-on across Azure, Entra ID, M365, Intune, Defender XDR, AKS, Terraform, CI/CD pipelines, and Datawarehouse to find where reality doesn't match requirements.
• Develop solutions that close gaps, respond to cyber security incidents, and create plans to prevent future occurrences.
• Develop and automate SIEM and SOAR solutions in collaboration with our SOC.
• Use AI tooling to automate evidence collection, speed up gap analysis, and generate structured audit documentation.
• Track findings, coordinate with technical owners, escalate what's stuck, and verify that fixes hold.
• Make regulatory requirements understandable for technical teams and security requirements understandable for everyone else.

What you'll need

• Security-first mindset and appreciation for developer experience.
• 5+ years of experience in cyber security or technical compliance role in a cloud-first environment.
• Technical fluency across Azure, Entra ID, Microsoft 365, Intune, and Defender, and comfortable with Kubernetes, IaC, Terraform, CI/CD, and APIs.
• Experience with security tooling and automation across SAST, SCA, DAST, CNAPP, CWPP.
• Insights on what ISO 27001:2022, NIS2/BSIG, and KRITIS require.
• Use AI tools in daily work and know how to apply them to compliance and security operations.
• Clear communication in English, spoken and written.
• Inspired by the energy transition and want to make a difference.

Nice to have

• Knowledge of German language.
• Knowledge of BSI-Grundschutz and BSI C5.
• Certifications like CISSP, OSCP, CISM, CRISC, AZ-500, SC-100, GCIH, or OSIR.

What they offer

• Shape security at Germany's first green unicorn and make a real dent in climate change.
• Team of 65+ nationalities that is smart, driven, and genuinely collaborative.
• On-site in Berlin-Friedrichshain with modern office, height-adjustable desks, and amenities.
• Real ownership from day one with short decision paths and open feedback culture.
• 29 + 2 vacation days, Wellhub membership, and corporate benefits.