> Markdown version of [/jobs/ext/4110082-senior-consultant-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/4110082-senior-consultant-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Consultant Cybersecurity Engineer

- **Company:** QESTIT GmbH
- **Location:** Germany (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Bash Shell, CompTIA Security+, Cyber Security, DevOps, Identity and Access Management, Python (Programming Language), Network Segmentation, Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Ansible, Sherwood Applied Business Security Architecture, Security Information and Event Management, Software Engineering, Data Logging, Scripting, Google Cloud, Cloud Platform System, IT Architecture, Mitre Att&ck, Togaf, Information Technology, Terraform, Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=2cb3861e23d0d6f6

## About the Role

* You have successfully completed a degree in computer science or business informatics, or can demonstrate comparable training.
 * As a security, system or DevOps engineer, you bring experience with a clear security focus.
 * Experience in IT architectures gives you a major advantage.
 * You are well versed in at least one major cloud platform (Azure, AWS, GCP) as well as in container and Kubernetes security.
 * Confident use of methods such as STRIDE, attack trees or comparable threat-modelling approaches is part of your toolbox.
 * You have scripting skills (e.g. Python, PowerShell, Bash) and experience with infrastructure as code (Terraform, Ansible).
 * A good understanding of networks, secure software development, operating system hardening and common attack techniques (e.g. MITRE ATT&CK, OWASP Top 10, SAMM) is among your strengths.
 * Ideally, you hold certifications such as OSCP, CompTIA Security+, AZ-500, CKS, CISSP, CCSP, SABSA or TOGAF.
 * A hands-on mentality, team spirit and good German and English skills round out your profile.

## Description

* You implement security measures and harden cloud, container and on-prem environments.
 * In CI/CD pipelines, you integrate security tools (SAST, DAST, SCA, secret scanning) and drive DevSecOps forward.
 * Operating and optimising security systems such as SIEM, EDR, WAF, IAM and PAM falls within your area of responsibility.
 * You carry out vulnerability analyses, assess findings, steer remediation together with the teams and advise clients on an equal footing.
 * With scripting and infrastructure as code, you automate recurring security tasks.
 * Depending on your level of expertise, you design secure architectures for cloud, hybrid and on-prem environments and support development teams across the entire SDLC.
 * Likewise, depending on your expertise, you translate regulatory requirements (NIS2, CRA, DORA, ISO 27001, BSI IT-Grundschutz) into actionable architecture guidelines and define reference architectures, security patterns and standards for IAM, network segmentation, cryptography and logging/monitoring.