Are you ready to develop your passion for IT security at Shopware and play a key role in securing our internal IT systems? Do you want to proactively develop innovative solutions to make our systems more resilient to constantly evolving attack methods? Then you've come to the right place! Join our dynamic IT Infrastructure team and contribute to the continuous improvement of our digital infrastructure.
No matter where you work from, you are an integral part of the team. We are therefore looking for an IT Security Specialist (m/f/d) throughout Germany.
* You are responsible for ensuring network security and protecting the IT infrastructure from cyber attacks.
* You will be responsible for configuring and maintaining the local firewall systems.
* You create documentation for internal IT and security incidents, creating a comprehensive archive that helps us to learn from past situations and prepare for future challenges.
* You will be responsible for organising external penetration tests and carrying out and analysing phishing simulations to raise our Shopware employees' awareness of IT security and prepare them for the latest tricks used by attackers.
* You will respond both proactively and reactively to IT security incidents and carry out vulnerability scans to harden and secure the IT systems.
* You will support the ISO in conducting audits.
* To strengthen the security awareness of employees, you will train them and demonstrate best practices.
* You harden the Microsoft 365 infrastructure and the Entra ID tenant.
* You set up a syslog and logging infrastructure that helps us to recognise even the most minor signs of threats.
This is what you'll bring to the table:
* You have a degree in computer science, IT security or a related subject or have completed vocational training as an IT specialist specialising in system integration (or comparable).
* You not only have the necessary specialist knowledge from two to three years of professional experience, but a passion for IT security combined with a high willingness to learn.
* You have excellent knowledge of Microsoft Server Windows Active Directory, Entra ID and Defender, as well as Powershell or Bash Scripting.
* You are familiar with the administration of firewalls and intrusion detection systems.
* You already gained first experience in AWS Security and are ready to take on the topic further.
* You impress with your extensive IT-technical understanding and analytical thinking skills and have a growing awareness of data protection and compliance requirements.
* If we could wish for it, you have already gained experience with Sonic Wall systems and have basic knowledge of ISO 27001 and SOC 2.
* You are characterised by your structured way of working and high self-organisation and independence, even under time pressure. You always work in a very trusting and responsible manner.
* You enjoy working in a team, are reliable and enjoy dealing with people. Being on call is no problem for you.
* You speak fluent German and English.
This is what we offer you:
* Company Culture: Open culture with flat hierarchies, where individual initiative is encouraged.
* Employment Contracts: Permanent positions that offer long-term security.
* Flexibility: Flexible working hours and options for mobile work and full-remote contracts.
* Equipment: Freedom to choose your preferred work hardware.
* Onboarding: Well-structured onboarding with support from a personal "buddy."
* Work Environment: An inspiring environment with dedicated colleagues and a dynamic community.
* Development Opportunities: Diverse opportunities for personal growth and development.
* Additional Benefits: Attractive perks such as company pension plans, health programs, and regular team events.
... and much more!
You can get a detailed insight on our career page .
Additional information: This position is entrusted with a special level of sensitive data and involves a considerable amount of responsibility. Therefore, an up-to-date simple police clearance certificate must be submitted when the contract is signed. The contract can only be signed if the certificate is available without any relevant entries.
Your personal contact for this position is Josephine Scheffler and is happy to answer any questions you may have!