Senior Security Engineer (F/M/D)

THE OPPORTUNITY

Join our Global IT Infrastructure team and take ownership of security operations that protect NavVis worldwide. You’ll lead detection and incident response across corporate IT and SaaS environments, working hand-in-hand with Service Delivery, Cloud Infrastructure Engineering, and our Cloud Infrastructure Engineer.

This is an hands-on role where you’ll make real impact—investigating threats, driving improvements, and shaping security processes. No ticket forwarding, no passive coordination—just meaningful responsibility and the chance to build a security posture you can be proud of.

If you thrive on solving complex problems, love staying ahead of emerging threats, and want to safeguard technology that powers the future of spatial intelligence, we want to hear from you!

HOW YOU WILL MAKE AN IMPACT

• Lead security incident response and drive continuous improvements.

• Own Microsoft Defender, email security, and phishing protection.

• Strengthen network security with IT Ops: firewalls, VPNs, segmentation.

• Manage vulnerability scanning, remediation, and risk reporting.

• Govern access reviews and enforce least privileges.

• Run ISO 27001 & SOC 2 audits and coordinate via Vanta.

• Support business continuity and disaster recovery planning.

• Assess vendor security and monitor SaaS risk.

• Research emerging threats and refine security playbooks.

WHAT WILL HELP YOU SUCCEED IN THE ROLE

• You have strong, hands-on experience across security operations, incident response, and forensic analysis in SaaS and hybrid IT environments.

• You bring deep practical knowledge of Microsoft Defender, Entra ID, email security, identity-related incidents, and endpoint protection.

• You are comfortable managing security topics from start to finish with minimal oversight.

• You are a strong communicator who can break down complex security topics in simple actionable terms to both technical and non-technical stakeholders.

• You are experienced working with infrastructure teams to operate network and vulnerability security controls.

• You demonstrate a proven ability to drive ISO 27001 OR SOC 2 audits end-to-end.

• You bring pragmatic approaches to improving processes with a bias towards automation over manual work.

HOW WE WILL KNOW WE ARE A PERFECT MATCH

Your recruiting partner for this role is Sylvie (she/her). You can expect to go through a screening call, and/or up to 4 rounds of interviews, where we would love to discover your passion and interests, introduce you to who we are and what drives us, and finally understand how we can potentially add value to each other's growth.

HOW WE WILL KEEP YOU SMILING

• It's important to take a break from work! We offer 30 days of paid time off per year
• Affordable access to a vast network of fitness and wellness facilities through EGYM Wellpass subsidy
• Deutschlandticket subsidy to support sustainable travel using public transport
• We offer flexible working hours and a hybrid work setup, enabling you to plan your work around your life, and not your life around work!
• We offer full visa and relocation support for international candidates
• An attractive bike leasing model through JobRad, in line with our commitment towards sustainable mobility
• A competitive compensation package that values the skills and experience you bring
• Up to 4000 EUR employee referral bonus
• Financial support for local language classes to help you in your journey of integrating into the culture!