Security Lead - m/f/d

We're hiring a hands-on Security Lead to own security at Langdock across all surfaces. This is a broad ownership role deliberately scoped for one ambitious person, covering the certified ISMS, identity and access management, device management, security programs like bug bounty, and physical security.

What you'll do

• Own identity and access management across all identity surfaces, building and automating processes for onboarding, offboarding, and privilege provisioning.
• Properly configure and own Entra ID, including conditional access, group and role design, lifecycle automation, and integration with tools your teams use.
• Own MDM and device management, ensuring every device that touches company data is enrolled, encrypted, patched, and recoverable.
• Run bug bounty and security programs, set up responsible disclosure, triage findings, and drive resolution with engineering.
• Own the information security management system, maintain and improve ISO 27001 and SOC 2 Type II certifications, and design controls that are proportionate and practical.
• Manage the risk register, identify and assess information security risks, and drive risk treatment plans to closure.
• Partner with engineering, operations, and sales to implement controls that fit into existing workflows rather than bolting security on afterward.
• Automate relentlessly, treating every recurring manual task as something to be automated using AI tooling as a force multiplier.

What you'll need

• Technical background in cloud infrastructure, identity providers, software development practices, and how modern SaaS products are built and operated.
• Identity & endpoint experience: you've run or built IAM and device management in practice with lifecycle automation, least-privilege and just-in-time access, and MDM rollout.
• Hands-on ISMS experience operating ISO 27001 and/or SOC 2 programs through at least one full audit cycle, ideally at a growth-stage SaaS or tech company.
• Pragmatism over bureaucracy: you default to the simplest control that achieves risk reduction and can explain the why.
• An AI-first mindset and belief that one person with great automation and AI tooling can own what used to take a team.

What they offer

• Work from Langdock's office in Berlin, Greifswalder Strasse 212, in person.
• Transparent salaries tied to levels with equity included in all roles.