Senior Security Engineer (m/f/d)

isaraerospace · Parsdorf, Bavariasenior

En corto

▸Ingeniero de seguridad senior que construye y prueba activamente controles de seguridad en red, identidad y detección.
▸Gestiona y automatiza plataformas SASE, firewalls, SIEM, EDR y PKI, con enfoque en escalabilidad y resiliencia.
▸Destaca por actuar como adversario interno: prueba sus propios sistemas para garantizar que realmente funcionen.

Proficiency in English required for technical collaboration and documentation.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓Experiencia hands-on con plataformas SASE y firewall de alto nivel.
✓Conocimiento profundo en hardening de identidad (directorio), MFA y gestión de certificados.
✓Capacidad para diseñar, escribir y mantener detecciones de seguridad (SIEM, IDS/IPS).
✓Experiencia en automatización con PowerShell y Python.
✓Experiencia en seguridad en entornos cloud y on-prem.
✓Capacidad para operar y resolver incidentes de nivel L3 en entornos críticos.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

SASEFirewallIPSAVSandboxingDDoS ProtectionDNS SecurityWAFCDNCIS Benchmarks

¿A quién escribirle en isaraerospace?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Mission Brief You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets and the ground systems that launch them are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Engineer. You live in the consoles, the rule sets and the code. You own our secure access and network security controls, our endpoint and identity security stack, and our detection content, and you operate them yourself rather than directing from the sidelines. You wear two hats: the Builder who implements and runs the controls that keep us safe, and the Adversary who keeps testing whether those controls and detections actually fire. This is a senior engineering role with the spirit of an architect. You are expected to design what you operate, not just configure it: pick the pattern, write it down, and make it hold at fleet scale. A versatile engineer with real depth, comfortable switching from a firewall rule set to a detection query to a directory hardening sprint in the same week, and a technical anchor others lean on. Your Role in Our Space Mission SASE and Network Security • Own and operate our SASE platform , including revamping Internet Security policies and redefining Private Access policies. • Drive firewall security with the network team: own network security engineering and segmentation strategy, analyze rule sets, identify gaps, and see remediation through together with network engineering, who own the devices. • Coordinate firewall-adjacent controls: IPS, AV, sandboxing and DDoS protection. • Manage our DNS security and WAF solutions , including our edge and CDN-based protection services. Security Posture and Hardening • Apply CIS Benchmarks to raise posture across firewalls, endpoints, our cloud identity platform and our cloud productivity suite. • Lead the clean-up and hardening of our on-premises and cloud identity directories together with the infrastructure team, then keep both hardened on an ongoing basis. • Drive our phishing-resistant MFA and privileged access programme, including just-in-time elevation and the remediation of the attack paths we find. • Own certificate lifecycle and PKI operations: key ceremonies, automated renewal, and input to our post-quantum migration plan. Detection and Visibility • Manage and tune our IPS/IDS platforms; write and maintain custom IDS signatures, and operate network sensors for NTA appliances. • Build and maintain detections in our SIEM and apply MITRE ATT&CK to detection engineering and use-case design in support of the SOC. • Extend visibility into OT with purpose-built OT monitoring tooling. • Act as an L3 incident responder for escalated security events, and turn every finding into a fix, a new detection or a hardened configuration. Security Stack and Automation • Own our endpoint detection and response, data protection and CASB platforms as their technical owner. • Script and build internal tooling in PowerShell and Python, so controls and checks run themselves. Design and Engineering Partnership</str

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.