(Principal) IT Security Consultant: Secure by Design (m/f/d)

(Principal) IT Security Consultant: Secure by Design (m/f/d) at CLOUDYRION GmbH

Requirements

Please note that this position requires EU work authorization.

Language: English - Fluent (C1)

Must haves

• At least 7 years’ experience in cybersecurity, with a proven track record of successfully leading end-to-end client programmes for large enterprises
• In-depth technical expertise in cloud security (AWS, Azure or GCP) and modern software development practices (CI/CD, IaC, containers)
• Hands-on experience in leading transformations in the areas of ‘Secure-by-Design’, security architecture, Secure SDLC, cloud security or AI security at enterprise level
• You are comfortable steering the room with CISOs, CTOs and product leadership and at ease in an architecture deep-dive with a senior engineer
• Ready to work on-site three days a week and open to working at our clients’ sites in the DACH region for up to five days a month

A real plus

• Experience in at least one of the following areas: AI security / MLSecOps, Kubernetes platform security, regulatory programmes (NIS2, DORA, CRA, EU AI Act)
• Certifications in cloud security (CCSP, AWS / Azure / GCP Security Specialty)
• Proven track record in building and managing consulting teams or security champions
• You have a public presence, e.g. through presentations, publications, OSS, or a blog

Activities

• Lead a Secure by Design transformation within the product organisation of a DAX 30 client, involving over 100 engineers, more than 20 product teams and a 18-month roadmap. You will be responsible for the target architecture, the rollout plan and the communication with the CISO and CTO.
• Run a cloud security programme for a critical infrastructure operator preparing for an audit. You will define the control framework, risk assessment and security architecture, integrate these into AWS/Azure/GCP landing zones, and report to senior management.
• Shape a company-wide AI security programme (LLMs, agent-based systems, MLSecOps) for a client preparing for the EU AI draft, implementing the regulation into technical reality.
• Building a Secure SDLC programme from scratch for a fast-growing product company, including CI/CD security tools, large-scale threat modelling, a network of security officers, and KRIs that the board actually reads.

Internally, you’ll help shape the practice itself: methodologies, accelerators, recruitment, talent development, and the development of our AI-powered Secure-by-Design product.

Does that sound exciting yet a bit overwhelming to you? It doesn’t have to be. ‘Fail fast, learn quickly’ is our motto. Together with the team, we’ll keep developing and help you reach your full potential. And if this feels like too big a step, feel free to take a look at our other vacancy for Secure by Design Consultants.

Team

We are the Guardians of Cyberspace: here, you’ll find a young, highly qualified and incredibly motivated team that not only understands cybersecurity, but lives and breathes it.

We work to the highest standards, think strategically, act with precision and focus on solutions that deliver sustainable results. For us, excellence isn’t just a buzzword, it’s our everyday standard.

At the same time, we know that the best results come from places where people feel at home. We share knowledge, embrace an open culture of learning from mistakes, give honest feedback and support one another in pushing our boundaries.

And, of course, we celebrate our shared moments too. Whether it’s Waffle Wednesday, our FIFA tournaments or our team events: we take our mission seriously, but ourselves not too seriously.

CLOUDYRION stands for ambition, curiosity and boundless energy. We work independently whilst pulling together as a team. Here you’ll find space for your ideas, trust in your decisions and an environment that values performance and lets your personality shine through.

In short: a team that wants to make a big impact without ever forgetting to have fun.

About The Company

CLOUDYRION is a start-up for IT security consulting from Düsseldorf. CLOUDYRION stands for solution-oriented approaches in the areas of risk assessment, ethical hacking, and consulting. We create sustainable IT security concepts according to the secure-by-design principle. CLOUDYRION takes cybersecurity in software projects to the next level. In close cooperation with your IT experts, we establish a sustainable security framework that minimizes the risk of cyberattacks, ensures the highest security by implementing the security- and privacy-by-design concept as early as the development phase, a...

Click on "Apply" for details on the benefits, the team and the application process.