Senior Security Engineer (m/f/d)

The role

You will own and operate security controls including SASE, network security, and identity security. You will design, implement, and test security patterns for both IT and OT environments.

What you will do

• Own and operate the SASE platform
• Drive firewall security and segmentation strategy
• Coordinate IPS, AV, sandboxing and DDoS protection
• Manage DNS security and WAF solutions
• Apply CIS Benchmarks to firewalls, endpoints, cloud identity and cloud productivity suite
• Lead hardening of on-premises and cloud identity directories
• Drive phishing-resistant MFA and privileged access programme
• Own certificate lifecycle and PKI operations
• Manage and tune IPS/IDS platforms
• Build and maintain detections in the SIEM

Required qualifications

• 10+ years in security engineering
• Hands-on experience administering an enterprise SASE platform
• Experience applying CIS Benchmarks to firewalls, endpoints, cloud identity and cloud productivity platforms in production
• Experience rolling out phishing-resistant MFA or privileged access management
• Solid fundamentals in networking and firewalls
• Experience with CDN-based WAF and edge protection services
• Background across endpoint detection and response, data protection, SIEM and detection query languages
• Experience in cloud identity and on-premises directory hardening
• Experience in certificate lifecycle and PKI operations
• Practical MITRE ATT&CK-driven detection work
• Experience writing custom IDS/IPS signatures
• Capability in detection, incident response and vulnerability management

Nice to have

• Working knowledge of OT protocols such as EtherNet/IP, OPC UA and Modbus
• Familiarity with OT network monitoring
• Experience in aerospace, defense, energy, manufacturing or other OT-heavy, safety-critical environments
• Prior SOC or incident response team experience
• Cloud security depth in a major public cloud and its native security services
• Familiarity with industry standards such as ISO 27001 and NIST
• Relevant certifications, defensive or engineering (e.g., Security+, GCIA) and offensive (e.g., OSCP or equivalent)

Benefits

• Employee Participation Program: virtual company share program
• 6 weeks of vacation
• Subsidised lunch
• Relocation support with deductible expenses up to an agreed amount
• Yearly wellness allowance
• Individual learning budget granted after the probation period
• Free access to OpenUp online support for physical and mental well-being

Before you apply

• Affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process due to security clearance requirements

About the company

Isar Aerospace is a fast-growing company building a modern space business to enable faster, better and cheaper access to space. They provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites into Low Earth Orbit.