Security Operations Specialist

Security Operations Specialist (SecOps) Your tasks You design, analyze and optimize the security architecture of our software products (MyHighway & MyTunnel) and actively drive their secure further development according to the Security-by-Design principle in product development You integrate and automate security in our CI/CD pipelines (DevSecOps) – from SAST/DAST and dependency/container scanning to secure coding guidelines and hardening measures You are responsible for vulnerability management as well as incident response (Incident Detection & Response) and continuously develop the necessary security toolchain and processes You plan and conduct security assessments, architecture risk analyses and audits and ensure compliance with relevant compliance requirements (e.g., ISO/IEC 27001, NIS2, CRA) throughout the entire development lifecycle You advise internal stakeholders (especially development, architecture and DevOps), develop guidelines and standards and carry out training as well as awareness measures Your skills and talents You have completed a degree in computer science (FH/HF) – ideally with a focus on software engineering or cyber security – or possess a comparable qualification You bring several years of experience in software development and have developed towards security architecture / secure software development You know modern architecture principles, secure coding practices and threat modeling methods (e.g., STRIDE) and know how to anchor them in everyday development You have experience with DevSecOps tools and the integration of security into CI/CD pipelines You know the relevant standards and requirements, e.g., NIS2, CRA as well as BSI standards and BSI IT-Grundschutz, and can transfer them to product development Know-how in the securing of OT and IoT systems as well as in security processes and SOC concepts is an advantage You have very good German and English skills and can confidently conduct conversations and meetings in English Why us? An employer where your inputs carry weight Great scope for design and responsibility, opportunities to help shape the future in transport Interesting and varied tasks in a growing industry environment Further training that promotes and challenges your personal strengths Collegial working environment and open company culture with contact to the international SWARCO team Joint fitness training and regular barbecue evenings on the company's own terrace About us We at Bergauer AG build integrated solutions for the secure operation of technical systems in public infrastructures. As part of the international SWARCO Group, we have the know-how and technologies to support operators of urban and municipal transport and building infrastructures on their way into the digital age. We develop our solutions in-house, thus guaranteeing maximum flexibility and reliability throughout the entire operating life. jpidb52dfdbjm jit0832jm jiy26jm