IT Security Engineer

Stack

Responsibilities

• ▹Operate, configure and further develop security-relevant IT systems, e.g. firewalls, VPN, IDS/IPS, SIEM, endpoint protection, EDR, PAM, MFA and monitoring solutions
• ▹Technically implement security requirements in close coordination with the information security officer
• ▹Analyze, assess and remediate technical vulnerabilities in server, client, network and application environments
• ▹Organize, carry out and follow up vulnerability scans, security analyses and penetration tests
• ▹Technical coordination and professional interface to the external Security Operations Center
• ▹Support the analysis and handling of security events, incidents and suspected cases
• ▹Contribute to incident response processes, initial forensic assessments and technical measures for containment and recovery
• ▹Plan and implement security-related projects, e.g. network segmentation, zero trust, MFA, system hardening, logging, monitoring and permission management
• ▹Advise and support IT departments and medical engineering on secure system architectures, configurations and operating models
• ▹Technically support KRITIS audits, reviews and evidence processes
• ▹Create and maintain technical security documentation, operating manuals and evidence
• ▹Support the operation and development of the information security management system from a technical perspective
• ▹Contribute to training and awareness measures with a focus on technical security aspects
• ▹Work closely with internal departments, external service providers and auditing bodies

Requirements

• ▹Successfully completed degree in computer science, business informatics, IT security or a comparable field, or alternatively completed vocational training in IT, for example as an IT specialist for system integration
• ▹Several years of hands-on experience in IT infrastructure, network security, system administration or operational IT security
• ▹German, spoken and written, at least level C1
• ▹Sound knowledge of several of the following areas: firewalls, network security, SIEM, IDS/IPS, endpoint security, EDR, Active Directory, Windows Server, Linux, virtualization, network segmentation, VPN, MFA or permission management
• ▹Experience in analyzing and remediating technical vulnerabilities
• ▹Understanding of security monitoring, log analysis, incident response and technical protective measures

Nice to have

• ▹Experience in the KRITIS or healthcare environment
• ▹Knowledge of relevant standards, laws and requirements, for example BSI-KritisV, IT-Sicherheitsgesetz, GDPR, KHZG, B3S Medizinische Versorgung or NIS2
• ▹Certifications such as BSI IT-Grundschutz-Praktiker, CompTIA Security+, CISSP, CEH, Microsoft Security, Cisco Security or comparable
• ▹Experience working with a Security Operations Center or managed security service provider

Soft skills

What we offer

• ▹Pay up to pay grade E11 of the TVöD (hospitals), depending on personal qualifications
• ▹Multiprofessional team, intercultural collaboration and individual support
• ▹Appropriate, structured onboarding period
• ▹Permanent employment, full or part time
• ▹Hybrid working

About the company

With 547 planned beds and 20 clinics and institutes, Klinikum Wolfsburg is one of the largest hospitals in Lower Saxony, with around 2,200 employees, and a clinical teaching site of Göttingen University Medical Center. As a hospital providing specialized care it is part of critical infrastructure.