NVISO Security

Security Engineer

• The project focuses on evaluating a Security-as-Code tool designed for assessing Microsoft 365 environments and Entra ID.
• The primary objective is to understand the deployment process, including its configuration and integration within existing systems.
• The project involves: conducting a comprehensive analysis of the tool's functionalities; identifying its strengths and potential areas for improvement; performing a gap analysis by comparing the tool with another security assessment script, and determining areas where it excels and where enhancements might be necessary.
• Additionally, the project explores the implementation of custom controls within the Security-as-Code framework.
• This involves delving into the technical aspects of the tool to understand how custom policies and controls can be developed and integrated into the existing framework.
• Collaboration with team members is essential to design and test these custom controls, ensuring they meet the teams specific security needs.
• Through this project, participants will gain experience in security assessment methodologies, Microsoft 365 and Entra ID features and architecture, and the customization of security solutions, contributing to the enhancement of the organization's security posture through automation.

Internship, Cloud Security – MS 365 Security-as-Code Analysis

Account Manager

• Responsible for driving NVISO's sales by identifying new business opportunities
• Building and maintaining relationships with clients
• Meeting sales targets
• Conducting market research
• Developing sales strategies
• Presenting products or services to potential clients
• Negotiating contracts and closing deals
• Collaborating with marketing and customer success teams to ensure client satisfaction and retention

Key Account Manager

Architect

• Assist our smaller and larger customers with the overall reinforcement of their security posture.
• Defining a Security Strategy, supported by a corporate threat assessment in collaboration with key stakeholders in the organization
• Assisting IT or security teams with the implementation of strategic security projects, acting as an interim security officer.
• Implementing or refining our client’s security governance, including decision-making mechanisms, security policies, and norms or security management processes and procedures
• Executing risk assessments and elaborating action plans in concertation with internal and external stakeholders
• Assisting in reaching or maintaining compliance to information security legal, contractual, or internal requirements
• Defining or testing crisis management, business continuity, or disaster recovery planning
• Raising the awareness of staff or management on cyber threat through classic or innovative awareness initiatives

Cyber Strategy and Architecture Consultant

Full-stack Engineer

• Develop and implement architectural solutions that align with NVISO’s cybersecurity objectives.
• Design scalable and robust architectures that support cutting-edge security products and tools.
• Lead technical exploratory innovation activities such as developing technology prototypes and running Proof-of-Concepts in collaboration with our (internal) customers.
• Work with cross-functional teams to integrate new technologies and methodologies into existing systems, ensuring seamless operation.
• Engage in continuous learning to stay updated with the latest industry trends and advancements, ensuring NVISO remains at the forefront of technology.
• Provide technical mentorship and guidance to junior team members, fostering a culture of innovation and technical excellence within the team.

AI Software Engineer

• Lead our team of CISO/ISO consultants while actively contributing to client projects
• Enhance clients' cybersecurity posture by creating and driving security strategies and their programs
• Collaborate closely with clients to understand their business objectives and unique security requirements
• Assess the security maturity of clients to identify gaps and areas for improvement
• Develop and implement a fit-for-purpose security program
• Drive the security program at clients, acting as the security champion
• Conduct risk assessments, identifying potential vulnerabilities, and recommending risk mitigation strategies
• Oversee and support the implementation of the security program, including policies, procedures, and controls
• Provide updates to management on the ‘state of security’ at their company
• Hold steering committees at the customer with relevant stakeholders

Cyber Strategy & Architecture Manager

• Lead and manage a team of CISOaaS/GRC consultants to deliver high-quality services to clients.
• Work closely with clients to understand their business objectives, risks and specific security requirements.
• Assess clients' security maturity (using ISO, BSI or NIST standards) to identify gaps and opportunities for improvement.
• Develop and implement a tailored security program aligned with industry standards.
• Oversee the security program at client sites, acting as the security owner and promoting security awareness.
• Conduct risk assessments, identify potential vulnerabilities and recommend risk mitigation strategies.
• Support the implementation of the security program, including policies, procedures and controls.
• Provide management updates on the organization’s security posture.
• Facilitate steering committees with relevant stakeholders at the client to guide and adjust the security program as needed.
• Actively participate in the sales process by preparing and presenting statements of work, project plans and requirements definitions for ongoing projects within your team.
• Perform technical tasks in account management for specific top-tier clients.

Senior Information Security Manager

• Lead and manage a team of CISOaaS/GRC consultants to deliver high-quality services to clients
• Collaborate closely with clients to understand their business objectives, risks, and specific security requirements
• Assess clients' security maturity (using ISO, BSI or NIST standards) to identify gaps and areas for improvement
• Develop and implement a fit-for-purpose security program aligned with industry standards
• Act as the security champion for client engagements, promoting a security-first mindset
• Conduct risk assessments, identify potential vulnerabilities, and recommend risk mitigation strategies
• Oversee and support implementation of the security program, including policies, procedures, and controls
• Provide management updates on the overall ‘state of security’ for client organizations
• Convene steering committees with relevant stakeholders to guide and adapt the security program as needed
• Actively participate in the sales process by drafting and presenting Statements of Work, project plans, and project requirements for work carried out by your team
• Perform technical account management duties for select top-tier, strategic clients

Information Security Manager – m/f/d

Cyber Strategy – Architecture Consultant

• Developing AI software using Python that will be used by both internal teams and clients.
• Integrating with industry-adopted frameworks such as MCP, OpenAI SDK, etc.
• Leveraging Azure Cloud functionality, such as Web App Services & Storage Accounts.
• Participating in code reviews and providing constructive feedback to peers.
• Continuously researching and staying up to date with the latest advancements in AI and machine learning technologies.
• Contributing to the improvement of development processes and practices within the team.

• Assist clients in creating a more secure development process
• Actively coach developers in secure coding
• Help implement security concepts into the development lifecycle
• Implementing security controls inside of the development process
• Presenting your roadmap to increase the maturity of our client's software development practice
• Providing hands-on training on secure development concepts and secure coding to developers
• Scope, Execute & Plan assessment type of projects including Threat modeling Architecture Reviews, Maturity Assessments, etc.
• Securing the development pipeline

Application Security Consultant, Threat Modeling

Security Operations

• Build and define security solutions and act as technical security subject matter expert to protect customer environments
• Write modular, maintainable playbooks and Standard Operating Procedures (SOPs)
• Create processes and strategy documents for SOC services and SIEM setups
• Create log onboarding strategies that confirm regulatory requirements
• Analyze reports of security events and incidents to identify configuration or policy issues
• Plan and manage onboarding of new log sources, troubleshoot issues with clients and vendors, and report system defects
• Perform architectural reviews and identify improvement recommendations
• Manage product enhancement/feature requests with vendors and perform technical account management for strategic clients
• Test and configure new products and technologies and attend vendor-specific meetings and conferences

Internship, Cloud Security – MS 365 Security-as-Code Analysis

Key Account Manager

Cyber Strategy and Architecture Consultant

AI Software Engineer

Cyber Strategy & Architecture Manager

Senior Information Security Manager

Information Security Manager – m/f/d

Cyber Strategy – Architecture Consultant

AI Software Engineer

Application Security Consultant, Threat Modeling

Junior Security Operations Engineering Consultant