Security Engineer

  Technical Expertise
(Mandatory Requirements – No Exceptions):

• Minimum
  5+ years of hands-on professional experience in IT Security, with a strong
  primary focus on Security Operations / "Security on Duty"  
• Proven
  experience in:
• Day-to-day
  security operations and incident-related activities  
• Handling,
  tracking, and implementing security mitigation measures  
• Continuous
  security assessments of applications and environments  
• Operational
  support of secure systems in productive environments
• Clear
  priority definition:
• The
  majority of the role (~70–80%) focuses on Security Operations and ongoing
  security responsibilities  
• Activities
  such as vulnerability scanning and penetration testing are required but
  represent a smaller portion of the role
• Mandatory
  penetration testing experience, including:
• Execution
  of basic penetration tests and vulnerability scans  
• Understanding
  and validation of security findings  
• Contribution
  to remediation activities
  
  (However, candidates focused primarily on penetration testing will not
  be considered)
• Important
  clarification:
  This role requires a Security Engineer actively working in operations and
  implementation, not a profile limited to identifying issues.
  Candidates must demonstrate ownership of mitigation and follow-up, not
  only reporting findings.  
• Proven
  hands-on experience in:
• Vulnerability
  management and remediation tracking  
• Security
  assessment execution across the lifecycle  
• Supporting
  and implementing concrete security improvements
• Additional
  mandatory hands-on engineering / development skills, required to support
  operational security:
• Scripting
  / automation (e.g., Python, Bash or similar)  
• Kubernetes
  (preferably Azure AKS) and Helm  
• CI/CD
  environments, especially GitHub Cloud and GitHub Actions
• Strict
  role positioning:
• This
  is a Security Engineer role with a strong operations focus  
• Not a
  pure Penetration Tester  
• Not a
  Security Analyst-only role  
• Not a
  DevOps or Software Developer role
• Candidates
  must demonstrate the ability to:
• Work
  effectively in Security Operations ("Security on Duty")  
• Drive
  and implement mitigation measures end-to-end  
• Combine
  analysis, operations, and technical implementation
• Experience
  expectation:
• At
  least 5 years in IT Security (operations-focused)  
• Plus
  additional engineering experience  
• Typically
  resulting in ~8+ years total professional experience, unless developed in
  parallel

Methodological
Skills:

• Strong
  understanding of agile methodologies (Kanban, Jira, Confluence)  
• Ability
  to work independently and manage priorities effectively  

Communication Skills:

• Excellent
  English communication skills  
• Ability
  to collaborate effectively in a virtual, international team  
• Clear
  and structured documentation practices  

Compliance &
Standards:

• Knowledge
  of European and German security standards, including:  
• OWASP  
• ISO
  27001  
• EU data
  protection and IT security requirements  
• German
  regulatory expectations relevant to Deutsche Post DHL products

Responsibilities

  Technical Expertise
(Mandatory Requirements – No Exceptions):

• Minimum
  5+ years of hands-on professional experience in IT Security, with a strong
  primary focus on Security Operations / "Security on Duty"  
• Proven
  experience in:
• Day-to-day
  security operations and incident-related activities  
• Handling,
  tracking, and implementing security mitigation measures  
• Continuous
  security assessments of applications and environments  
• Operational
  support of secure systems in productive environments
• Clear
  priority definition:
• The
  majority of the role (~70–80%) focuses on Security Operations and ongoing
  security responsibilities  
• Activities
  such as vulnerability scanning and penetration testing are required but
  represent a smaller portion of the role
• Mandatory
  penetration testing experience, including:
• Execution
  of basic penetration tests and vulnerability scans  
• Understanding
  and validation of security findings  
• Contribution
  to remediation activities
  
  (However, candidates focused primarily on penetration testing will not
  be considered)
• Important
  clarification:
  This role requires a Security Engineer actively working in operations and
  implementation, not a profile limited to identifying issues.
  Candidates must demonstrate ownership of mitigation and follow-up, not
  only reporting findings.  
• Proven
  hands-on experience in:
• Vulnerability
  management and remediation tracking  
• Security
  assessment execution across the lifecycle  
• Supporting
  and implementing concrete security improvements
• Additional
  mandatory hands-on engineering / development skills, required to support
  operational security:
• Scripting
  / automation (e.g., Python, Bash or similar)  
• Kubernetes
  (preferably Azure AKS) and Helm  
• CI/CD
  environments, especially GitHub Cloud and GitHub Actions
• Strict
  role positioning:
• This
  is a Security Engineer role with a strong operations focus  
• Not a
  pure Penetration Tester  
• Not a
  Security Analyst-only role  
• Not a
  DevOps or Software Developer role
• Candidates
  must demonstrate the ability to:
• Work
  effectively in Security Operations ("Security on Duty")  
• Drive
  and implement mitigation measures end-to-end  
• Combine
  analysis, operations, and technical implementation
• Experience
  expectation:
• At
  least 5 years in IT Security (operations-focused)  
• Plus
  additional engineering experience  
• Typically
  resulting in ~8+ years total professional experience, unless developed in
  parallel

Methodological
Skills:

• Strong
  understanding of agile methodologies (Kanban, Jira, Confluence)  
• Ability
  to work independently and manage priorities effectively  

Communication Skills:

• Excellent
  English communication skills  
• Ability
  to collaborate effectively in a virtual, international team  
• Clear
  and structured documentation practices  

Compliance &
Standards:

• Knowledge
  of European and German security standards, including:  
• OWASP  
• ISO
  27001  
• EU data
  protection and IT security requirements  
• German
  regulatory expectations relevant to Deutsche Post DHL products

Qualifications

  Technical Expertise
(Mandatory Requirements – No Exceptions):

• Minimum
  5+ years of hands-on professional experience in IT Security, with a strong
  primary focus on Security Operations / "Security on Duty"  
• Proven
  experience in:
• Day-to-day
  security operations and incident-related activities  
• Handling,
  tracking, and implementing security mitigation measures  
• Continuous
  security assessments of applications and environments  
• Operational
  support of secure systems in productive environments
• Clear
  priority definition:
• The
  majority of the role (~70–80%) focuses on Security Operations and ongoing
  security responsibilities  
• Activities
  such as vulnerability scanning and penetration testing are required but
  represent a smaller portion of the role
• Mandatory
  penetration testing experience, including:
• Execution
  of basic penetration tests and vulnerability scans  
• Understanding
  and validation of security findings  
• Contribution
  to remediation activities
  
  (However, candidates focused primarily on penetration testing will not
  be considered)
• Important
  clarification:
  This role requires a Security Engineer actively working in operations and
  implementation, not a profile limited to identifying issues.
  Candidates must demonstrate ownership of mitigation and follow-up, not
  only reporting findings.  
• Proven
  hands-on experience in:
• Vulnerability
  management and remediation tracking  
• Security
  assessment execution across the lifecycle  
• Supporting
  and implementing concrete security improvements
• Additional
  mandatory hands-on engineering / development skills, required to support
  operational security:
• Scripting
  / automation (e.g., Python, Bash or similar)  
• Kubernetes
  (preferably Azure AKS) and Helm  
• CI/CD
  environments, especially GitHub Cloud and GitHub Actions
• Strict
  role positioning:
• This
  is a Security Engineer role with a strong operations focus  
• Not a
  pure Penetration Tester  
• Not a
  Security Analyst-only role  
• Not a
  DevOps or Software Developer role
• Candidates
  must demonstrate the ability to:
• Work
  effectively in Security Operations ("Security on Duty")  
• Drive
  and implement mitigation measures end-to-end  
• Combine
  analysis, operations, and technical implementation
• Experience
  expectation:
• At
  least 5 years in IT Security (operations-focused)  
• Plus
  additional engineering experience  
• Typically
  resulting in ~8+ years total professional experience, unless developed in
  parallel

Methodological
Skills:

• Strong
  understanding of agile methodologies (Kanban, Jira, Confluence)  
• Ability
  to work independently and manage priorities effectively  

Communication Skills:

• Excellent
  English communication skills  
• Ability
  to collaborate effectively in a virtual, international team  
• Clear
  and structured documentation practices  

Compliance &
Standards:

• Knowledge
  of European and German security standards, including:  
• OWASP  
• ISO
  27001  
• EU data
  protection and IT security requirements  
• German
  regulatory expectations relevant to Deutsche Post DHL products