IT Security Engineer

As IT Security Engineer (f/m/d), you will play a key role in securing our systems and ensuring compliance with industry standards and regulations. You are passionate about DevOps & Cybersecurity, keep an eye on the latest Cybersecurity threats, trends and best practices, and are eager to collaborate with cross-functional teams to strengthen our security posture: Main tasks:

• Strengthen and secure our infrastructure, supporting our DevOps practices
• Conduct regular security assessments, penetration testing, and audits to ensure the resilience of our software
• Monitor systems and networks for suspicious activity and potential vulnerabilities
• Investigate and respond to security incidents, including breaches and malware outbreaks
• Manage endpoint protection, firewalls, and intrusion detection systems
• Strengthen the security of our Java/Spring-based systems by identifying vulnerabilities and flaws
• Collaborate with development teams to enable secure configurations and deployments
• Help ensure compliance with key regulations and standards such as GDPR, ISO 27001, and DORA, * Impact: A diverse range of responsibilities in an innovative, modern payment institution in the heart of Hamburg, offering you plenty of room for initiative and personal development.
• Cross-functional collaboration: Engaging, cross-departmental projects enrich your day-to-day work and give you the opportunity to actively shape your role and work environment.
• Continuous Growth: Regular, structured feedback meetings, individual training opportunities, and an annual development budget that you can manage independently.
• Flexibility meets team spirit: Flexible working hours allow you to balance your professional and personal life - without missing out close collaboration with the team.
• Attractive and appreciative benefits: Fair compensation based on your experience, 30 days of annual leave, and Hamburg’s best coffee.

• Several years of proven experience as as IT Security Specialist (w/m/d) or in a similar role

• Strong understanding of security tools and technologies (e.g., PenTesting, SIEM, IDS/IPS, firewalls)

• Familiarity with network and application security principles

• Hands-on experience with incident response and security analysis

• Proficiency in Linux server environments

• Proficiency in scripting and automation (e.g., Python, Bash, Ansible)

• Solid knowledge of Java and/or JavaScript development and deployment processes is beneficial

• A proactive mindset and hands-on approach

Nice to have

• Experience working in regulated environments (e. g. finance, healthcare)
• Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+

cflox is an international payment institution that combines payment transactions with working capital and financing to create unique solutions. With a focus on working capital, cflox offers customers the optimization of payment terms and cash flow. They can choose between early payment to suppliers or additional payment terms without involving suppliers. In cooperation with numerous established, international financing partners such as Deutsche Bank, Commerzbank, ING and UniCredit as well as over 150 active customer programs, cflox offers tailor-made solutions to strengthen liquidity and efficiency in the supply chain. cflox GmbH is headquartered in Hamburg, Germany, and is registered as a payment institution (Payment Services Supervision Act - ZAG) for the provision of payment services in Germany with the Federal Financial Supervisory Authority (BaFin).