Security Engineer

• Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories).
• Assess the completeness, accuracy, and risk coverage of various threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP, TARA, TAL, etc.).
• Verify security requirement traceability across assets, trust boundaries, and system functions.
• Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management).
• Perform targeted security testing (white-box and black-box) on system APIs, client/mobile apps, backend services, and cloud infrastructure.
• Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols.
• Evaluate the use of post-quantum cryptography and hybrid models in secure key management.
• Analyze secure deployment configurations across containerized platforms (Docker, Kubernetes), CI/CD pipelines, and cloud services.
• Deliver comprehensive, standards-aligned technical reports based on evaluation findings.
• Communicate product security risks clearly to both technical and non-technical audiences.

Product Security Consultant

• Coordinate and drive infrastructure and security-related projects, ensuring timely delivery, proper prioritization, and alignment with business needs.
• Oversee Microsoft technology environments, including Azure, Active Directory, Microsoft 365 / Office 365, and related collaboration and identity services.
• Support the planning, implementation, and improvement of cloud and hybrid infrastructure solutions.
• Coordinate infrastructure activities related to VMware, servers, networking, storage, backup, and disaster recovery environments.
• Monitor infrastructure performance, availability, and security posture, escalating and coordinating resolution of issues when needed.
• Participate in the design and rollout of security controls, access management processes and endpoint/security tools

Infrastructure & Security Manager

• Define, establish and implement organizational information security processes, to ensure business, regulatory, legislative and contractual requirements and obligations are met.
• Manage the internal and external ISMS audit processes, monitor effectiveness of controls and corrective actions in cooperation with the stakeholders across the organization.
• Manage gap analysis, compliance readiness, and compliance monitoring activities for ISO/IEC 27001, PCI DSS and other regulatory security audits.
• Coordinate external security audits, assessments and testing as well as remediation plans development and implementation.
• Identify, assess and monitor information security risks and recommend mitigation measures.
• Develop content, coordinate and facilitate a comprehensive organizational information security awareness training program.
• Manage security requirements with third parties, including due diligence of products and services providers and information security requirements clauses in service provision agreements and contracts.
• Develop, coordinate and maintain information security policies, procedures and other security related documents.
• Analyse, map and communicate information security requirements, that derive from legislative and regulatory obligations in various jurisdictions.
• Serve as project manager/lead within security projects.
• Continually improve and update knowledge to accommodate changes to the company’s regulatory environment and needs.

GRC Security Expert

• Dive into cybersecurity with hands-on training and real-world projects.
• Work with a global team to protect applications, networks, and organizations.
• Develop technical and problem-solving skills that set you apart.

Cybersecurity Engineering Intern

• Assess information security risks
• Support security of information and IT assets
• Manage third-party providers
• Provide information security training

See all jobs on JobTailor

Product Security Consultant

Infrastructure & Security Manager

GRC Security Expert

Cybersecurity Engineering Intern

Senior Analyst, Governance, Risk & Compliance, Information Security