IT Security Engineer (all genders)

Job description

Support us in designing the insurance experience of the future. As an IT Security Engineer you own IT Security Operations at getolo end to end: running our detection and response capability day to day, keeping endpoints and infrastructure hardened, and driving incidents, vulnerabilities and findings to closure. Security operations is the core of this role. Beyond it, you bring an operator's perspective into how we design systems and into our governance work, to ensure control effectiveness. This is a full-time hybrid role, with 1–2 days per week working from our Berlin office. Requirements Your Mission Security Operations - your primary function Run and continuously improve our SIEM: log source onboarding, detection rules, tuning, alert quality Automate orchestration and response with SOAR Operate endpoint protection across our fleet Triage and manage alerts, driving them to closure or escalation Lead incident management from detection through containment, recovery and post-incident review Detect and remediate configuration drift against hardening baselines; run technical audits Oversee vulnerability management: scanning, prioritisation, and remediation tracking with IT and engineering Plan and coordinate penetration tests (internal and with external providers) and drive remediation Security Architecture - supporting Contribute to security best practices and standards for infrastructure, endpoints, identity and SaaS Bring security design input into new systems and projects early Act as a security advisor to IT, engineering and the wider business Security GRC - supporting Feed operational reality into security policies, the risk register and control design Support internal and external audits with evidence collection and remediation of findings Contribute to security awareness trainings Support third-party and vendor security assessments Deliver operational input for management reporting on security posture, KPIs and incidents What You Will Need to Succeed 4+ years in security operations, SOC, blue team or a comparable hands-on security role Hands-on SIEM experience: onboarding sources, writing and tuning detections, running investigations Knowledge of orchestration and response with SOAR Solid experience with EDR and MDM-managed endpoint fleets (macOS and Windows) Practical incident response experience and the composure to lead an incident Vulnerability man…