Senior Cyber Security Engineer (f/m/d) Cloud

About this role

About IONOS At IONOS, we don't just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe's leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools. What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises.

We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit. Ready for your next step? Become part of IONOS and grow with us. For us, security isn't an afterthought or a checkbox exercise – it's built right into our DNA. We integrate security exactly where it matters most: into our architectures, pipelines, and operational concepts. Compliance evidence is generated naturally from our day-to-day operations, not from stressful last-minute audit prep.

We are looking for someone who can translate security requirements into resilient technical concepts and actively verify their effectiveness. Tasks Drive the evolution of our Secure SDLC side-by-side with our dev teams. Lead Threat Modeling and architecture reviews – catching risks early in the design phase, not right before a release. Design robust IAM concepts (role models, permission logic, recertification) and define clear cryptographic standards and baselines.

Take charge of vulnerability and pentest management: scanning, CVSS scoring, prioritizing, and tracking remediations. Specify requirements for logging, monitoring, and error handling, and review their implementation across the board. Design and evaluate technical Business Continuity (BC) and disaster recovery tests. Automate compliance and evidence collection directly within the teams' CI/CD pipelines. Qualifications Well-founded, multi-year practitioner’s experience with standardised management systems and certifications, attestations in the cyber security area.

You have practical experience from two or more certified scopes according to ISO 27001, IT-Grundschutz, BSI C5. More ISO management system experience from privacy standards comes as a plus. You have multi-year experience with above standards and certifications in a technical organisation, as in the company offers technical products. You are burning for modern tool supported, efficient integration of management systems and certification activities into the daily routine of an organisation.