Senior Security Engineer

EnBW Energie Baden-Württemberg AG
Karlsruhe, Germany
9 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Part-time (≤ 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Languages
English
Job source

Tech stack

Artificial Intelligence Amazon Web Services Software System Penetration Testing Identity and Access Management Network Security Zero Trust Network Access Secure Coding Security Information and Event Management Software Engineering Systems Integration Software Vulnerability Management Devsecops

Job description

  • Shape and drive the security strategy for EnBW’s next-generation trading platform, ensuring a resilient, secure, and future-ready environment
  • Design, implement, and continuously enhance security controls across AWS, trading applications, and AI/GenAI workloads
  • Embed Security-by-Design, Zero Trust, and DevSecOps principles throughout the entire technology landscape and software development lifecycle
  • Identify security risks through threat modeling, risk assessments, and the coordination of penetration testing activities
  • Partner with engineers, platform teams, and business stakeholders to integrate security into products, processes, and decision-making
  • Lead incident response, recovery planning, and regulatory compliance efforts, ensuring readiness for standards such as NIS2, BSI, and the Cyber Resilience Act (CRA)

Requirements

  • A minimum of 5 years of experience in security engineering, with a strong track record of securing cloud environments at scale, ideally on AWS
  • Deep expertise across key security domains, including IAM, vulnerability management, SIEM/SOC, network security, and incident response
  • Hands-on experience with threat modeling, risk assessments, security hardening, and data protection standards in modern software environments
  • A solid understanding of DevSecOps practices, secure coding principles, and integrating security throughout the software development lifecycle
  • Confidence in navigating regulatory frameworks such as NIS2, BSI, and the Cyber Resilience Act (CRA), while supporting audit readiness and compliance initiatives
  • Strong stakeholder management and communication skills, combined with fluency in English
  • Experience with AI/GenAI security, energy trading environments, or relevant security and AWS certifications is considered a plus

Benefits & conditions

We are looking for people who believe in the positive power of energy and in their own ability to move things forward. People who know the importance of energy and infrastructure and recognize the immense opportunities they present to shape the future for everybody. Because we are just the same: a large, dynamic company that opens its door wide to people who want to join us in turning ideas into real change.

Unser Angebot

We want our employees to feel secure - in every aspect. That is why we value stable working relationships, safely equipped workspaces, regular health checks and individual onboarding and development. Financial extras such as and allowances provide additional security. \n

Further benefits: \n\n

  • 30 days annual leave\n
  • Financial extras such as vacation pay and Christmas bonus, profit-sharing, an employee savings plan, company pension scheme, energy price discount and child bonus\n
  • Leasing options for mobile devices and bicycles\n
  • Discounted "Deutschland-Ticket" (train ticket)\n
  • Flexible working models such as part-time hours and home office\n
  • More about our various employer benefits at a glance\n

Vielfältige Aufgaben

About the company

Join EnBW, Germany’s third-largest energy company, as it embarks on a monumental transformation. With the establishment of a new trading office in London and the separation of its trading business, EnBW is reimagining its trading architecture to ensure scalability, efficiency, and alignment with its business strategy. This is a rare opportunity to play a pivotal role in shaping the security foundation of trading systems at one of Europe’s leading energy firms.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:15 min

Key lessons learned from implementing automated mobile DevSecOps

Moataz Nabil Moataz Nabil · LIVE

2:59 min

Applying secure coding practices and proactive system monitoring

Mihaela-Roxana Ghidersa · LIVE

1:16 min

Securing internal pod communication with network security policies

Marc Nimmerrichter · World Congress 2022

2:47 min

Exploring career opportunities and recruitment open positions

Kurt Eder · LIVE

10:35 min

Teaching and coaching security concepts for lasting impact

Tanya Janca · World Congress 2021

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

Videos

See all

Related articles

See all