Security Consultant

Stack

Responsibilities

• ▹Analyzing clients' IT infrastructure, application environments, and security processes, identifying vulnerabilities, and developing tailored security concepts.
• ▹Advising clients on the design and implementation of IT security solutions, standards, and guidelines in complex environments.
• ▹Carrying out risk analyses and evaluations of technical measures, and supporting audits, penetration tests, and certifications (e.g. ISO 27001, BSI-Grundschutz).
• ▹Evaluating security-relevant data from SIEM, log, and vulnerability systems, and providing technical recommendations.
• ▹Supporting the automation of standard technical processes, and advising on network security, cloud security, IAM, and SOC/SIEM.
• ▹Producing documentation such as operations manuals, incident reports, and action plans to reduce risk in future incidents.

Requirements

• ▹Solid experience in IT security consulting, ideally with direct client contact in an enterprise environment.
• ▹Ability to understand complex technical relationships and communicate them clearly, especially around network security, cloud security (Azure, AWS), and ISMS.
• ▹Good knowledge of relevant standards and frameworks such as BSI-Grundschutz, ITIL, ISO 27001, or NIST.
• ▹Ability to evaluate technical measures, derive requirements, and develop tailored solution concepts, without being involved in operational duties.

Nice to have

• ▹CISSP, CCSP, CISM, OSCP, or ISO 27001 Lead Implementer certification (a plus, not mandatory if you have comparable practical experience).

Soft skills

What we offer

• ▹Work performed mainly remotely (from home or the office), with on-site client visits only when necessary.
• ▹Independent, responsible work with strong team backing.
• ▹Support for further training and certifications.
• ▹Agile teams organized across all of Germany.
• ▹A diverse and creative mindset.
• ▹The flexibility and mentality of an agile start-up, a trait the company has had for 25 years.
• ▹A SPIRIT/21 buddy program to support new starters.

About the company

The company (SPIRIT/21) works mainly remotely, visiting client sites only when necessary. Its teams are organized in an agile way across Germany, and it has operated with the flexibility and mentality of an agile start-up for 25 years.