Job Search

We are seeking an Information Security Compliance Analyst to support the development, maintenance and continuous improvement of information security governance and compliance activities. The successful candidate will help ensure that policies, procedures and controls align with applicable laws, regulations, contractual obligations and recognised security frameworks. This role will work closely with technology, risk, legal, privacy and business teams to promote a consistent and effective approach to information security across the organisation.

Key responsibilities include coordinating compliance assessments, internal reviews and audit activities; collecting and validating evidence; maintaining control documentation; and tracking remediation actions through to completion. You will assist with risk assessments, third-party security reviews, policy updates, security awareness initiatives and the preparation of management reports. The role will also involve monitoring changes in regulatory and industry requirements, identifying potential compliance gaps, supporting control testing and advising stakeholders on practical improvements. You will maintain accurate records within governance, risk and compliance systems and contribute to the ongoing development of metrics, dashboards and reporting processes.

Applicants should have experience in information security, IT risk, compliance, internal audit or a related discipline, together with a sound understanding of frameworks such as ISO 27001, NIST or SOC 2. Familiarity with data protection requirements, security controls, audit methodologies and third-party risk management is desirable. Relevant professional certifications, such as CISA, CISSP, CISM, CRISC or ISO 27001 training, would be advantageous. You should be analytical, organised and confident working with stakeholders at different levels, with strong written and verbal communication skills and the ability to manage multiple priorities. A proactive approach, careful attention to detail and a commitment to confidentiality are essential.

We are seeking an Offensive Security and Threat Intelligence Specialist to strengthen our cyber defence capability through proactive testing, intelligence-led investigations and clear, actionable risk reporting. In this role, you will identify weaknesses across applications, infrastructure, cloud environments and organisational processes, helping teams understand and reduce exposure to real-world threats. You will work closely with security operations, engineering, technology and risk stakeholders to improve resilience and support informed decision-making.

Your responsibilities will include planning and conducting penetration tests, vulnerability assessments, red team activities and adversary emulation exercises across agreed environments. You will research threat actors, tactics, techniques and procedures, monitor relevant intelligence sources, and assess how emerging threats may affect business operations. The role will involve analysing security telemetry and technical findings, validating potential attack paths, developing proof-of-concept demonstrations where appropriate, and producing concise reports with prioritised remediation advice. You may also contribute to incident investigations, threat hunting, security testing standards, detection engineering and the continuous improvement of offensive security tools and methodologies.

The successful candidate will have proven experience in offensive security, penetration testing, threat intelligence or a closely related discipline. Strong knowledge of networking, operating systems, web applications, cloud technologies, identity platforms and common attack frameworks is expected, along with practical experience using relevant testing and intelligence tools. Certifications such as OSCP, CREST, GIAC or comparable qualifications are desirable, but demonstrable capability and sound judgement are equally valued. You should be able to communicate complex technical issues clearly to both specialist and non-specialist audiences, manage competing priorities, and work ethically and collaboratively. Curiosity, attention to detail, a methodical approach and a commitment to responsible disclosure are essential. This is an opportunity to play a central role in anticipating threats, challenging assumptions and helping build stronger, more secure services.

We are seeking a skilled Penetration Tester to identify, assess and help remediate security weaknesses across applications, infrastructure, networks and cloud environments. You will plan and conduct authorised security assessments using a combination of manual testing, recognised methodologies and appropriate automated tools. Your work will help strengthen defensive capabilities, reduce operational risk and provide clear, actionable insight to technical and non-technical stakeholders.

Key responsibilities include scoping engagements, reviewing requirements and relevant documentation, performing vulnerability assessments and penetration tests, and safely validating potential weaknesses. You will investigate findings, assess exploitability and business impact, maintain accurate testing records, and produce high-quality reports containing evidence, risk ratings and practical remediation recommendations. You will also present results to stakeholders, support retesting activities, and contribute to the continuous improvement of testing methods, security standards and internal knowledge. Where appropriate, you may assist with threat modelling, secure development reviews, configuration assessments and incident response activities.

The successful candidate will have demonstrable experience in penetration testing, vulnerability assessment or a closely related cybersecurity role, with a strong understanding of common attack techniques and defensive controls. Practical knowledge of web applications, APIs, networks, operating systems, authentication mechanisms, cloud platforms and scripting is expected. Familiarity with standards and frameworks such as OWASP, NIST, PTES or CREST is desirable. You should be able to use security testing tools effectively while understanding their limitations, communicate complex technical issues clearly, and work responsibly within defined rules of engagement. Professional qualifications or certifications in penetration testing or information security are advantageous, as is experience working in regulated or enterprise environments. Strong analytical ability, attention to detail, sound judgement and a commitment to ethical and authorised testing are essential.

We are seeking a Senior AWS Cloud Security Engineer to help design, implement and continuously improve secure cloud environments. In this role, you will be responsible for developing and maintaining security architectures across AWS, embedding security controls into cloud platforms and supporting teams in building secure, scalable services. You will work closely with cloud engineering, development, infrastructure and compliance stakeholders to identify risks and deliver practical, sustainable solutions.

Your responsibilities will include defining and enforcing AWS security standards, implementing identity and access management, protecting workloads and data, and configuring security services such as IAM, CloudTrail, GuardDuty, Security Hub, Config and KMS. You will develop infrastructure and security automation using tools such as Terraform, CloudFormation, Python or similar technologies. You will also monitor cloud environments, investigate security events, support incident response and vulnerability remediation, and contribute to security assessments, threat modelling and continuous improvement initiatives.

You bring several years of professional experience in cloud security, ideally with a strong focus on AWS and enterprise environments. In-depth knowledge of AWS security best practices, networking, encryption, logging, monitoring and access control is essential. Experience with DevSecOps, CI/CD pipelines, containers, infrastructure as code and security testing is highly desirable. Relevant certifications such as AWS Certified Security – Specialty, Solutions Architect or equivalent are an advantage. You work independently, communicate clearly with both technical and non-technical colleagues, and are comfortable taking ownership of complex security topics. Professional English is required; knowledge of German is beneficial. The position is open to all qualified applicants, regardless of gender or background.