Platform Security Lead (m/f/d)

We are looking for a Platform Security Lead (m/f/d) to strengthen application and cloud security across Hapag-Lloyd’s platforms. You will work with IT, architecture, product, and development teams to integrate security throughout the software and cloud lifecycle - from design and build through deployment and operation.

You will act as a trusted security partner, translating threats and vulnerabilities into clear risks and practical security requirements, helping teams deliver secure, resilient services in line with the company’s risk appetite. We welcome candidates with relevant hands-on experience at an early career stage who are motivated to develop their expertise and grow into the broader scope of the role.

• Promote security by design within IT and development teams
• Conduct or support security risk assessments, architecture and design reviews, threat modeling, and gap analyses
• Define and advise on security requirements for applications, APIs, cloud environments, containers, and microservices
• Help integrate secure development practices and security testing into DevOps and CI/CD workflows
• Work directly with Security Champions to advance application security program goals, and actively contribute to the Security Champion community through presentations, knowledge sharing, and collaboration
• Advise teams on vulnerability findings, penetration-test results, security controls, and remediation priorities
• Assess cloud security designs and controls, including identity and access, network security, data protection, logging, and monitoring
• Communicate security risks, potential impacts, and treatment options to technical and non-technical stakeholders
• Serve as a primary security contact for assigned teams and connect them with relevant expertise within the CISO department
• Support the development and continuous improvement of security policies, patterns, standards, and reusable solutions
• Keep up to date with application, cloud, and platform security threats, technologies, and practices

• Degree, vocational training, or equivalent practical experience in IT, cybersecurity, software development, or a related field
• Relevant hands-on experience in information security, application security, cloud security, software development, or IT operations; senior-level experience is a plus, but not a requirement
• Practical exposure to at least one relevant area, such as application security reviews, cloud security, vulnerability management, threat modeling, secure development, or security testing
• Working knowledge of relevant security frameworks and standards, such as the NIST Cybersecurity Framework (CSF) and ISO 27001
• Practical knowledge of OWASP guidance , including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS), and the ability to apply relevant guidance in security reviews and recommendations
• Interest in developing expertise across application and cloud security, with the motivation to learn and take on broader responsibility over time
• Good analytical, communication, and collaboration skills, including the ability to work with engineers, architects, product owners, and business stakeholders
• Ability to take ownership of defined tasks, work independently as appropriate, and seek guidance when needed