> Markdown version of [/jobs/ext/3290037-principal-it-security-consultant-secure-by-design-cloudyrion-gmbh](https://www.wearedevelopers.com/jobs/ext/3290037-principal-it-security-consultant-secure-by-design-cloudyrion-gmbh). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # (Principal) IT Security Consultant: Secure by Design - CLOUDYRION GmbH - **Company:** CLOUDYRION GmbH - **Location:** Bochum, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Continuous Integration, Systems Development Life Cycle, Software Organization, Google Cloud, Large Language Models, Kubernetes - **Published:** September 18, 2026 - **Apply:** https://www.adzuna.de/details/5887754101 ## About the Role Must haves * At least 7 years' experience in cybersecurity, with a proven track record of successfully leading end-to-end client programmes for large enterprises * In-depth technical expertise in cloud security (AWS, Azure or GCP) and modern software development practices (CI/CD, IaC, containers) * Hands-on experience in leading transformations in the areas of 'Secure-by-Design', security architecture, Secure SDLC, cloud security or AI security at enterprise level * You are comfortable steering the room with CISOs, CTOs and product leadership and at ease in an architecture deep-dive with a senior engineer * Ready to work on-site three days a week and open to working at our clients' sites in the DACH region for up to five days a month A real plus * Experience in at least one of the following areas: AI security / MLSecOps, Kubernetes platform security, regulatory programmes (NIS2, DORA, CRA, EU AI Act) * Certifications in cloud security (CCSP, AWS / Azure / GCP Security Specialty) * Proven track record in building and managing consulting teams or security champions * You have a public presence, e.g. through presentations, publications, OSS, or a blog ## Description Right now, the wave of AI-ready cyber resilience and EU regulations (NIS2, DORA, EU CRA, EU AI Act) is reshaping how every large organisation in Europe approaches cybersecurity. Our Secure by Design practice is at the heart of this shift and takes it a step further: Compliance with regulatory requirements is a given for us, sustainable technical implementation is what we pride ourselves on: outcome-based rather than hour-based, knowledge-focused rather than leverage-focused, product-led rather than slide-led. To continue meeting our clients' needs whilst maintaining our quality standards, we are seeking experienced Secure by Design Consultants to help shape our scale. You will lead end-to-end 'secure by design' transformation programmes for our enterprise clients. These projects span several quarters and involve multiple teams, with you being responsible for the technical strategy, customer relationships and the final outcome. Activities * Lead a Secure by Design transformation within the product organisation of a DAX 30 client, involving over 100 engineers, more than 20 product teams and a 18-month roadmap. You will be responsible for the target architecture, the rollout plan and the communication with the CISO and CTO. * Run a cloud security programme for a critical infrastructure operator preparing for an audit. You will define the control framework, risk assessment and security architecture, integrate these into AWS/Azure/GCP landing zones, and report to senior management. * Shape a company-wide AI security programme (LLMs, agent-based systems, MLSecOps) for a client preparing for the EU AI draft, implementing the regulation into technical reality. * Building a Secure SDLC programme from scratch for a fast-growing product company, including CI/CD security tools, large-scale threat modelling, a network of security officers, and KRIs that the board actually reads. Internally, you'll help shape the practice itself: methodologies, accelerators, recruitment, talent development, and the development of our AI-powered Secure-by-Design product. Does that sound exciting yet a bit overwhelming to you? It doesn't have to be. 'Fail fast, learn quickly' is our motto. Together with the team, we'll keep developing and help you reach your full potential. And if this feels like too big a step, feel free to take a look at our other vacancy for Secure by Design Consultants. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)