Cybersecurity Engineer (m/f/d)

## Mission Brief You are a technical guardian of our digital environment. At Isar Aerospace, the systems, data and people that build our rockets are mission critical and protecting them takes someone who builds controls and then proves they hold. We are looking for a hands-on Security Engineer who bridges the gap between Security Architecture and Operations.

You are not just a consultant; you are a builder and an auditor. You wear two hats: the Engineer who designs and implements security controls, and the Technical Auditor who verifies that systems and operations meet the high standards required for a space company.

You will act as the technical conscience of our environment, working across domains such as endpoints, identity, cloud, networks and applications. ## Your Role in Our Space Mission - Engineer security controls: design, implement and maintain security controls across our technology stack, defining the exact configurations and policies required to protect our systems, applications and data. - Act as the technical auditor: you don’t just trust; you verify.

Check the configurations of IT and engineering teams against security baselines and provide guidance to close gaps. - Protect identity and access: help safeguard the keys to the kingdom through strong authentication, least privilege and privileged access controls across the environment. - Detect and respond: use security monitoring and telemetry to separate signal from noise.

When an alert fires, investigate the root cause and coordinate remediation. - Define the hardening standard: develop and maintain secure configuration baselines and engineering standards for the systems in your scope.

You define what “secure” looks like. - Automate the defence: use scripting to automate security checks, streamline incident response and integrate disparate security tools. - Collaborate and document: produce clear technical documentation and translate complex security requirements into runbooks that IT and engineering teams can execute. ## Qualification Checklist - Education: Bachelor’s or Master’s degree in Computer Science, Information Security or a related field, or the equivalent through relevant certifications and hands-on experience. - Experience: 3–5+ years in Information Security or Security Engineering, with hands-on ownership of security controls in a production environment. - Hands-on Engineering: deep experience implementing security controls in at least one domain such as endpoint, identity, cloud, network or application security.

You configure controls yourself, not just review them. - Broad Security Fluency: solid understanding of core security domains and how they interact to defend an enterprise environment. - Technical Audit Mindset: you can “check the homework” of other teams and know exactly where to look to verify whether a system is truly compliant with CIS Benchmarks or internal standards. - Detection and Response: proficiency in log analysis and security telemetry, able to troubleshoot an incident across network, endpoint, application and cloud logs to find the smoking gun. - Scripting: basic to intermediate scripting skills (e.g., PowerShell, Python) to automate administrative tasks and security validations. - Soft Skills: clear communicator who translates technical risk for different audiences, works controls through other teams and takes ownership of their work. - Languages: fluent English; German is a plus. ## Bonus Skills - Specialist depth in one or more areas such as cloud security, endpoint and identity (e.g., Microsoft ecosystem), network security (e.g., SASE, segmentation) or application security. - Relevant certifications (e.g., OSCP, GIAC, CISSP, SC-200, AZ-500) and experience applying frameworks such as CIS Benchmarks, NIST or ISO 27001. ## Benefits - Employee Participation Program: Share in our success through our virtual company share program - 30 days of vacation: Enjoy the days off to relax and recharge - Company pension plan: Secure your future with our company pension plan, featuring a 20% employer contribution after the probation period - Subsidised lunch: Stay energised with delicious, subsidised lunches every day - Public transport ticket: Commute with ease using a fully financed Deutschlandticket - Rental clothing with laundry service: Enjoy hassle-free workwear with our convenient rental clothing and laundry service - Sport Clubs membership: Stay fit with our sponsored sports club memberships (EGYM Wellpass) - Individual learning allowance: Grow your skills with an individual learning budget granted after the probation period - Childcare allowance: Receive a childcare allowance for your non-school-age children - And Much More!

Discover additional perks and benefits when you join our team. ## Who we are We are Isar Aerospace and we are at the forefront of New Space building a modern space business to enable faster, better and cheaper access to space. Our mission is to help democratise space and use it for good in order to improve life on Earth now and for the future generations.

We are a fast-growing company aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit. The company is privately funded by world-leading technology investors with strong commitment and support and our team is made of driven and talented people with a real passion for space innovation.

We're making rockets in a way that hasn't been done before disrupting a traditional industry. If you are up for the challenge, want to work on cutting-edge projects and be part of a team changing the world for better, come, join us and launch your career! Want to find out more about us?

Visit www.isaraerospace.com Data ProtectionWe process your personal data for the purpose of managing the recruitment process and assessing your application. For detailed information on how your data is processed, including your rights, please refer to our Privacy Policy . Disclaimer Isar Aerospace SE is an equal-opportunity employer committed to fairness and inclusivity.

We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process. All qualified applicants are encouraged to apply.