• Du arbeitest eng mit erfahrenen Cybersecurity Engineers zusammen und wirst aktiv in Kundenprojekte eingebunden. • Du bist Ansprechpartner des Kunden bei Rückfragen zu Sicherheitsvorfällen. • Du analysierst im Team strukturelle Schwächen des Kunden. • Du gibst einfache Best Practices weiter, auch an nicht-technische Ansprechpartner. • Du analysierst Logs und sicherheitsrelevante Datenquellen zur Erkennung möglicher Risiken. • Gemeinsam mit deinem Mentor arbeitest du kontinuierlich an deinen technischen und beratenden Fähigkeiten.

• Develop and execute the company's information security strategy and scalable security roadmap • Establish and maintain enterprise security policies, standards and governance frameworks • Present cybersecurity risks, recommendations and security metrics to executive leadership • Partner with department leaders to ensure security is integrated into business operations and decision-making • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes • Build and maintain the organization's cybersecurity risk register and remediation roadmap • Lead vulnerability management efforts and prioritize remediation based on business risk • Perform third-party vendor security assessments and ongoing vendor risk management • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security • Lead security compliance initiatives including SOC 2 Type II and future security certifications • Build and/or manage company-wide security awareness and phishing training programs • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices

• Participate in team exercises to identify potential security risks, including threat modeling and tabletop scenarios • Contribute to complex prioritization discussions around which risks are the most important to solve next • Plan projects to address the risks we prioritize, and coordinate with cross-functional stakeholders across the company to execute those projects • Build maintainable programs to implement operational excellence where ongoing work is needed to achieve our goals (e.g. vulnerability management) • Partner with engineering teams to architect secure software, address security concerns, and build a strong security culture • Build, customize, and run tools to increase the maturity of our security program without adding undue friction to the company’s operations • Support ongoing bug bounty and penetration testing programs • Establish and maintain a network of security champions • Understand security knowledge gaps of the development organization and help to deliver training to address gaps • Provide input into architectural discussions to enable teams to innovate in a secure and repeatable manner

• Review and threat model AI-powered product features, LLM integrations, agentic workflows, MCP servers, tools, plugins, retrieval systems, model outputs, and internal AI tools before launch. • Build reusable AI security primitives such as guardrails, scanners, policy checks, tool-use controls, registries, sandboxes, libraries, and workflow-native enforcement points. • Design security tooling that can sit in the inference, retrieval, or execution path to detect and prevent prompt injection, jailbreaks, tool misuse, data leakage, unsafe code generation, and suspicious agent behavior. • Partner with teams building products and platforms with AI to define practical security controls that fit how they design, build, and ship. • Proactively find, fix, and prevent AI security issues, while making any required product or engineering changes clear and low-friction for partner teams. • Turn one-off AI security issues into systemic fixes, paved paths, measurable controls, and reusable guidance.