We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications.
This is a rare opportunity to play a pivotal role at the intersection of cutting- edge defence technology and classified information security, working on some of the most sensitive and strategically significant programs in Europe.
No two days will look the same: from consulting delivery teams on security concepts and driving audit readiness, to shaping incident management procedures across a rapidly growing international organisation.
Take ownership of the day-to-day management and continuous improvement of the ISMS, ensuring frameworks remain audit- ready and aligned with ISO 27001 and BSI IT-Grundschutz requirements across Germany and international entities including the UK, France, and beyond.
Act as a trusted security advisor to delivery teams across a portfolio of high-priority defence programs, consulting on the implementation and documentation of security concepts and ensuring compliance with VS-NfD operational requirements.
Drive the planning, coordination, and execution of internal and external audits, as well as penetration testing activities, managing findings through to resolution and maintaining a culture of continuous security improvement.
Contribute directly to the design and establishment of a foundational NATO Classified Infrastructure, navigating the complex compliance and accreditation requirements this entails alongside existing national commitments.
Support the build-out of the Cyber SOC, helping to define processes, tooling, and operational procedures that will form the backbone of the organisation's detection and response capability.
Develop, implement, and refine Incident Management procedures, ensuring the organisation is prepared to respond swiftly and effectively to security events across classified and unclassified environments.
Participate in on-call rotations with a minimum commitment of one week per month, providing out-of-hours security support and incident response coverage as the organisation scales across multiple international locations.
Have 2–4 years of hands-on experience in Information Security or IT Security within NATO, EU, or German national classified environments, and are ready to take that expertise to the next level in a fast-moving, high-stakes setting.
Hold expert-level knowledge of ISO 27001 and BSI IT-Grundschutz and have practical experience implementing, managing, or auditing these frameworks — not just understanding them in theory.
Are deeply familiar with VS-IT systems, accreditation processes, and the compliance demands of classified networks, and can hit the ground running without extensive onboarding.
Thrive in environments where no two days are the same — equally comfortable advising engineers on security concepts in the morning and preparing audit documentation in the afternoon.
Have a solid grasp of core security technologies including SIEM, PKI, IDS/IPS, and cryptographic systems, and understand how these operate within classified and defence - grade environments.
Prior experience with NATO Security Policy frameworks and the accreditation requirements associated with NATO Classified Infrastructure, including familiarity with NATO CIS environments.
Exposure to EU security regulations and cross-border compliance requirements, particularly in the context of exporting classified security frameworks to international entities.
Experience supporting or contributing to the build-out of a Cyber SOC, including familiarity with SOC tooling, process design, and operational workflows.
Knowledge of TEMPEST standards and physical security requirements as they relate to classified IT environments.
Familiarity with NIS2 requirements and the practical steps involved in aligning an organisation's security posture with the directive's obligations.
Professional working proficiency in both German and English, enabling effective collaboration across international teams, auditors, and regulatory bodies without reliance on translation support.
Competitive salary and VSOP options
Relocation support : up to €2,500 and 4 weeks temporary accommodation
Health & wellness : gym membership and mental health support (Nilo.Social : regularly company events and monthly social allowances
Enhanced parental leave : 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.
Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work
These are the core benefits across all locations, there may be additional benefits in certain locations.
Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.