🕒 2 days ago
Evaluate, deploy, and maintain security systems across on-premise, cloud, and SaaS environments while helping assess risks, strengthen AI security controls, and monitor emerging workloads.
IT Security Engineer (all genders)
🕒 17 days ago
Security OperationsSIEMSOAREndpoint Detection And Response (edr)
📜 Description
- Run and improve SIEM detections, log onboarding, tuning, and alert quality; automate response with SOAR.
- Operate endpoint protection and manage alerts through resolution or escalation.
- Lead incident response from detection through containment, recovery, and post-incident review.
- Maintain hardening baselines, conduct technical audits, and oversee vulnerability remediation and penetration tests.
- Advise on security standards and design for infrastructure, endpoints, identity, SaaS, and new systems.
- Support security policies, risk and control design, audits, vendor assessments, awareness training, and management reporting.
🛠️ Requirements
- 4+ years in security operations, SOC, blue team, or a comparable hands-on security role.
- Hands-on SIEM experience, including log onboarding, detection writing and tuning, and investigations; knowledge of SOAR.
- Experience with EDR and MDM-managed macOS and Windows fleets, incident response, vulnerability management, and penetration-test coordination.
- Working knowledge of ISO 27001 or comparable frameworks, such as NIST CSF, CIS Controls, DORA, or Grundschutz.
- Scripting skills in Python, PowerShell, or Unix shell; experience with cloud-first SaaS and PaaS environments.
- Clear communication with non-security stakeholders and management; fluent English.
- Certifications such as GCIH, GCIA, CISSP, or Security+ are a plus; cloud and identity security, threat hunting, detection engineering, or audit experience are also valued.
✨ Benefits
- Attractive fixed salary
- Start with 28 vacation days, with an increase every two years (capped at 30 days). Holidays on December 24th and 31st.
- Choose between a free Swapfiets bike, or a Berlin/Brandenburg ticket (“VBB - Jobticket”) or BVG “Deutschlandticket” subsidized by us
- Work hybrid - from your home office or in our office in Berlin-Mitte
- Work abroad in the EU for up to 60 days
- Benefit from free coaching sessions with nilo.health, our mental health tool
- Test our products yourself! Choose between dentolo, petolo or vitolo
- Learning Budget starting from 750 € per year
- Regular (360 degree) feedback
- We communicate, collaborate, and celebrate in English to ensure everyone is included
Full job description
Support us in designing the insurance experience of the future. As an IT Security Engineer you own IT Security Operations at getolo end to end: running our detection and response capability day to day, keeping endpoints and infrastructure hardened, and driving incidents, vulnerabilities and findings to closure. Security operations is the core of this role. Beyond it, you bring an operator's perspective into how we design systems and into our governance work, to ensure control effectiveness.
This is a full-time hybrid role, with 1–2 days per week working from our Berlin office.
Requirements
Your Mission
Security Operations - your primary function
- Run and continuously improve our SIEM: log source onboarding, detection rules, tuning, alert quality
- Automate orchestration and response with SOAR
- Operate endpoint protection across our fleet
- Triage and manage alerts, driving them to closure or escalation
- Lead incident management from detection through containment, recovery and post-incident review
- Detect and remediate configuration drift against hardening baselines; run technical audits
- Oversee vulnerability management: scanning, prioritisation, and remediation tracking with IT and engineering
- Plan and coordinate penetration tests (internal and with external providers) and drive remediation
Security Architecture - supporting
- Contribute to security best practices and standards for infrastructure, endpoints, identity and SaaS
- Bring security design input into new systems and projects early
- Act as a security advisor to IT, engineering and the wider business
Security GRC - supporting
- Feed operational reality into security policies, the risk register and control design
- Support internal and external audits with evidence collection and remediation of findings
- Contribute to security awareness trainings
- Support third-party and vendor security assessments
- Deliver operational input for management reporting on security posture, KPIs and incidents
What You Will Need to Succeed
- 4+ years in security operations, SOC, blue team or a comparable hands-on security role
- Hands-on SIEM experience: onboarding sources, writing and tuning detections, running investigations
- Knowledge of orchestration and response with SOAR
- Solid experience with EDR and MDM-managed endpoint fleets (macOS and Windows)
- Practical incident response experience and the composure to lead an incident
- Vulnerability management from scanning through remediation, including pentest coordination
- Working knowledge of ISO 27001 or comparable frameworks (Grundschutz, NIST CSF, CIS Controls, DORA) and how controls map to daily operations
- Scripting for automation (Python, PowerShell, Unix shell)
- Clear communicator who can explain risk to non-security stakeholders and write for management
- Experience with cloud first tech stacks running on SaaS and PaaS
- Fluent English
What Would Make You Stand Out
- Certifications such as GCIH, GCIA, CISSP or Security+
- Cloud and identity security experience (e.g. Microsoft 365 / Entra ID, AWS or GCP)
- Detection engineering or threat hunting background
- Prior involvement in audits (ISO 27001, SOC2 or similar)
Benefits
Why getolo?
🌴 Salary & Vacation
- Attractive fixed salary
- Start with 28 vacation days, with an increase every two years (capped at 30 days). Holidays on December 24th and 31st.
🧑💻 Mobility & Flexibility
- Choose between a free Swapfiets bike, or a Berlin/Brandenburg ticket (“VBB - Jobticket”) or BVG “Deutschlandticket” subsidized by us
- Work hybrid - from your home office or in our office in Berlin-Mitte
- Work abroad in the EU for up to 60 days
🧘 Health
- Benefit from free coaching sessions with nilo.health, our mental health tool
- Test our products yourself! Choose between dentolo, petolo or vitolo
📚 Development
- Learning Budget starting from 750 € per year
- Regular (360 degree) feedback
🌍 Berlin Based, International Mindset
- We communicate, collaborate, and celebrate in English to ensure everyone is included
- Our diverse team spans from 33 different countries
🧬 Values
- Our values are not buzzwords, but actions that are a part of our individual and collective DNA:
- #fast: We simplify, move with urgency, and focus on outcomes
- #brave: We take bold decisions, challenge the status quo, and act with conviction
- #accountable: We deliver end-to-end, reduce dependencies, and own our decisions
- #caring: We treat each other with respect, build trust, and create an environment where everyone can thrive
🙌 And much more…
- Legendary summer and winter parties
- Regular team events
- Many discounts on the corporate Benefits Platform
- Two Community Days per calendar year
- Pet friendly office
Sounds like the perfect job for you? We look forward to receiving your application and getting to know you!
About getolo
Founded in 2015, getolo GmbH is an innovative and award-winning InsurTech company that offers comprehensive supplementary insurance plans in the areas of dental, pet health and liability, as well as health add-on coverage. Under the brands dentolo, petolo, patolo and vitolo, we serve over 265,000 customers across Germany, France and Spain, providing digital and hassle-free protection that seamlessly integrates into their daily lives.
We believe that prevention is always better than cure—which is why we focus on preventive care, customer-centric service, and financial security to protect our customers and their loved ones from unexpected costs. Thanks to the close collaboration of our team of market specialists and insurance experts, we continuously monitor industry developments to offer practical solutions for current challenges.
getolo's company culture is built on collaboration, innovation, and agility—always with a strong focus on the needs of our customers. With a team of around 300 employees, getolo is led by Daniel Gadea (CEO) and Laura Wulff (CGO). getolo is a partner of DA Direkt and part of the Zurich Group Germany.
getolo is an equal opportunity and diversity employer. We strive to create a friendly, safe, and welcoming environment for all our team members, regardless of ethnicity, gender, gender identity and expression, sexual orientation, limitations and talents of any kind, physical appearance, social background, marital status, age, or religion (or lack thereof).
When you apply, we focus solely on your experience and motivation. You decide what additional information you want to disclose (photo, marital status, religion, gender, nationality, etc.). We value and treat all applications equally.
Contact:
getolo Recruiting Team
jobs@getolo.com
Similar jobs
Search more Cybersecurity Engineer jobs
🕒 13 days ago
Assess network and server security, monitor SIEM and EDR alerts, investigate suspicious activity, and coordinate incident response while developing tools and recommending security improvements.
🕒 3 days ago
Own day-to-day security compliance and customer assurance, managing standards, audits, and assessments while contributing to threat detection, application security, cloud security, and penetration testing.
🕒 10 days ago
Operate endpoint, cloud, and identity security services for enterprise customers, handling security posture, access controls, incident escalation, audit evidence, and reusable playbooks across managed security engagements.
Information Security Engineer (Thick Client Testing / Harness / VAPT)
🕒 11 days ago
Zscaler👥 10,000+ employees🏢 Computer And Network Security🤝 B2B
🕒 11 days ago
Lead penetration testing across applications and infrastructure, review security architectures, prioritize remediation with engineering teams, and build automation to uncover and reduce security risks.