• Advise our clients on developing, implementing and reviewing security concepts in a (partly) project-leading capacity • Perform IT risk analyses as well as implement and develop security standards and processes • Proactively identify client needs: document, assess and evaluate processes • Design goal-oriented, customized solutions together with our clients, speaking “their language” • Support the implementation and ongoing development of clients' ISMS • Improve the risk posture/information security by initiating, coordinating and monitoring recommended measures — your hands-on mentality is in demand with our clients

Role Description We are seeking a Security Engineer with expertise in implementing and troubleshooting security tools to enhance and support our security infrastructure. This role focuses on evaluating, deploying, and maintaining a suite of security technologies that protect our organization’s assets. The ideal candidate will have extensive experience in security engineering, hands-on tool deployment, and troubleshooting complex issues within various security solutions. Key Responsibilities - Security Tool Implementation: Lead the planning, deployment, and configuration of security tools, ensuring they meet organizational needs and integrate seamlessly with existing systems. Experience with SASE tools such as (Netskope/Zscaler), EDR tools such as (Crowdstrike/SentinelOne), Endpoint Privilege Management, Application Allowlisting, Email Security, SIEM Management and Detection Engineering. - Troubleshooting and Support: Diagnose and resolve issues with security tools in real-time to maintain their effectiveness, reduce downtime, and ensure optimal performance. - Tool Evaluation and Testing: Research, test, and recommend new security technologies based on the latest threat landscape and organizational needs. Lead proof-of-concept (POC) projects to assess potential new tools. - System Integration: Work closely with IT and other teams to ensure security tools are effectively integrated with various systems, including cloud and on-premises environments. - Automation and Optimization: Develop scripts and automation processes to improve the efficiency and reliability of security tools, minimizing repetitive tasks and reducing time-to-response. - Documentation and Knowledge Sharing: Create and maintain detailed documentation of security tool configurations, troubleshooting procedures, and best practices to ensure consistent processes and knowledge transfer. - Collaboration: Collaborate with other security teams, such as incident response and vulnerability management, to identify tool requirements, share insights, and improve overall security capabilities. - Training and Mentorship: Act as a subject matter expert on security tools, providing training and guidance to junior team members and stakeholders. Qualifications - Experience: 3+ years of experience in cybersecurity, with a focus on security engineering, tool deployment, and troubleshooting. - Education: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). - Certifications: Relevant certifications, such as CISSP, GIAC, CEH, or vendor-specific certifications for security tools (e.g., CrowdStrike, Netskope, Tenable, or similar). - Technical Skills: - Strong hands-on experience with a variety of security tools, such as endpoint protection, SIEM, vulnerability management, EDR, DLP, and network security tools. - Deep troubleshooting skills across both hardware and software security solutions. - Familiarity with scripting languages (Python, PowerShell, Bash) for automation of tasks related to tool deployment and management. - Understanding of network protocols, cloud environments, and security frameworks (MITRE ATT&CK, NIST, CIS). - Experience with configuring and managing tools in cloud environments (AWS, Azure, or GCP). - Soft Skills: - Strong analytical and problem-solving abilities with attention to detail. - Excellent communication skills to collaborate across teams and convey technical information effectively. - Ability to work independently and manage multiple projects in a fast-paced environment. Benefits - Flexible work environment. - In-person onboarding for remote employees. - Support for candidates needing accommodations.

Role Description We are seeking a specialist with experience in implementing and integrating BeyondTrust (Bomgar) solutions within manufacturing and OT (Operational Technology) environments. The role will support secure remote access requirements across plant operations while ensuring compliance with OT cybersecurity standards. - Design, deploy, and integrate BeyondTrust (Bomgar) remote access solutions. - Enable secure remote access for plant systems, industrial control systems, and third-party vendors. - Work with OT and IT teams to establish secure connectivity and access governance. - Integrate BeyondTrust with Active Directory, IAM/PAM solutions, and ITSM platforms. - Support remote access use cases across SCADA, MES, PLC, HMI, and related plant systems. - Ensure compliance with OT cybersecurity policies and industry best practices. - Collaborate with plant operations, infrastructure, cybersecurity, and application teams. Qualifications - Hands-on experience with BeyondTrust (Bomgar) implementation and integration. - Understanding of OT/Industrial environments and plant network architectures. - Experience with SCADA, MES, PLC, HMI, and industrial control systems. - Knowledge of Privileged Access Management (PAM), Identity & Access Management (IAM), and secure remote access solutions. - Familiarity with Active Directory, network security, VPNs, and access control mechanisms. - Understanding of OT cybersecurity frameworks and industrial security practices. Requirements - Experience in cement, building materials, mining, chemicals, or other process manufacturing industries. - Exposure to vendor remote access management in industrial plants. - Relevant BeyondTrust, cybersecurity, or industrial security certifications. Benefits - Generous Work-Life Balance: Flexible working hours and option to work from home. - Health & Wellbeing: Ergonomic workstations, subsidies for health services, sponsored sports events, etc. - Company Events & Community: Regular after-work sessions, shared breakfasts/lunches, summer and Christmas parties, team events, and more. - Open, Agile Culture: Flat hierarchies, high level of personal responsibility, international and diverse teams, friendly and supportive team spirit. - Training & Personal Development: Focus on promoting both technical and personal growth to ensure employees stay up to date. - Modern Tools & Workspace Design: Modern office, dual monitors, ergonomic equipment, and excellent on-site infrastructure.

Role Description Softeq is looking for a senior specialist to assess the FIPS-readiness of an embedded storage / SSD product and define the required remediation path. - Assess the current storage product architecture from a FIPS 140-3 readiness perspective. - Review cryptographic module boundaries, secure boot, key handling, RNG/entropy, and firmware security assumptions. - Identify certification blockers and architectural gaps. - Evaluate whether the current hardware platform is sufficient, or whether additional security hardware (for example, a secure element or dedicated security chip) is required. - Review third-party hardware / firmware components and highlight certification risks. - Provide practical recommendations for remediation priorities and certification feasibility. Qualifications - Hands-on experience with FIPS 140-2 / 140-3 readiness, validation support, or certification-oriented security work specifically for storage, SSD, or other embedded storage devices. - Strong understanding of storage device security architecture. - Experience with cryptographic module boundary definition in embedded storage products. - Familiarity with secure boot, firmware signing, key management, and entropy / RNG considerations. - Ability to perform technical gap assessment on incomplete or partially documented hardware / firmware systems. Company Description Established in 1997, Softeq was built from the ground up to specialize in new product development and R&D, tackling the most difficult problems in the tech sphere. Now we've expanded to offer early-stage innovation and ideation plus digital transformation business consulting. Our superpower is to deliver all of this under one roof on a global scale. So let's get started and build a better future together!