> Markdown version of [/jobs/ext/407658-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/407658-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Engineer - **Company:** cflox GmbH - **Location:** Hamburg, Germany - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Software System Penetration Testing, Bash Shell, CompTIA Security+, Cyber Security, DevOps, Intrusion Detection Systems, Spring Framework, Python (Programming Language), Linux Servers, Ansible, Security Information and Event Management, Software Security, Cyber Threat Analysis, Firewalls (Computer Science), Vulnerability Analysis - **Published:** June 24, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=3e7f0e38dc8030c1 ## About the Role Do you have experience in Spring Framework?, * Several years of proven experience as as IT Security Specialist (w/m/d) or in a similar role * Strong understanding of security tools and technologies (e.g., PenTesting, SIEM, IDS/IPS, firewalls) * Familiarity with network and application security principles * Hands-on experience with incident response and security analysis * Proficiency in Linux server environments * Proficiency in scripting and automation (e.g., Python, Bash, Ansible) * Solid knowledge of Java and/or JavaScript development and deployment processes is beneficial * A proactive mindset and hands-on approach Nice to have * Experience working in regulated environments (e. g. finance, healthcare) * Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+ ## Description As IT Security Engineer (f/m/d), you will play a key role in securing our systems and ensuring compliance with industry standards and regulations. You are passionate about DevOps & Cybersecurity, keep an eye on the latest Cybersecurity threats, trends and best practices, and are eager to collaborate with cross-functional teams to strengthen our security posture: Main tasks: * Strengthen and secure our infrastructure, supporting our DevOps practices * Conduct regular security assessments, penetration testing, and audits to ensure the resilience of our software * Monitor systems and networks for suspicious activity and potential vulnerabilities * Investigate and respond to security incidents, including breaches and malware outbreaks * Manage endpoint protection, firewalls, and intrusion detection systems * Strengthen the security of our Java/Spring-based systems by identifying vulnerabilities and flaws * Collaborate with development teams to enable secure configurations and deployments * Help ensure compliance with key regulations and standards such as GDPR, ISO 27001, and DORA, * Impact: A diverse range of responsibilities in an innovative, modern payment institution in the heart of Hamburg, offering you plenty of room for initiative and personal development. * Cross-functional collaboration: Engaging, cross-departmental projects enrich your day-to-day work and give you the opportunity to actively shape your role and work environment. * Continuous Growth: Regular, structured feedback meetings, individual training opportunities, and an annual development budget that you can manage independently. * Flexibility meets team spirit: Flexible working hours allow you to balance your professional and personal life - without missing out close collaboration with the team. * Attractive and appreciative benefits: Fair compensation based on your experience, 30 days of annual leave, and Hamburg's best coffee. ## Related Videos - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)