Plan and execute realistic red team scenarios (on-prem & cloud)
Identify and document vulnerabilities and attack paths
Conduct purple team engagements to validate detection & response
Adapt attack techniques based on defense tooling
Translate findings into actionable improvements for offensive & defensive capabilities
Provide clear reports & briefings for technical and non-technical stakeholders
Track findings and support remediation efforts
Participate in cybersecurity incidents, including on-call duty
Support analysis, containment, and recovery
Improve playbooks, detection rules, and response workflows
Plan and coordinate external penetration tests (scope, schedule, stakeholders)
Support internal teams during engagements
Deliver trainings and workshops
Share techniques, tradecraft, and lessons learned
Mentor colleagues and foster a strong security culture
Support international teams and collaborate with broader IT security

2–5+ years in offensive security / red teaming / penetration testing (hands-on required)
Strong knowledge of attacker tactics, techniques, and procedures (TTPs)
Understanding of defensive security concepts (SIEM/SOC, detection, logging)
Solid knowledge of Windows, Linux, Active Directory & enterprise architectures
Fundamentals of web, network, and cloud security
Ability to clearly communicate risk and produce high-quality documentation
Excellent communication and stakeholder management
Collaborative mindset, able to drive alignment and remediation
Excellent English skills, good German skills
Certifications (e.g., OSCP, CPTS) are an advantage.

An onboarding plan, welcome events and a buddy system will give you the best possible start;
A discounted DO&CO canteen is available to you in the office, and you will also receive financial support for meals if you work from home;
A modern & bright office with break areas in the heart of the city as well as modern IT equipment provide a good environment;
Discounted insurance and a company subsidy provide security. Additionally vouchers for supermarkets, perfumeries, furniture and hardware stores and much more can be purchased;
Flexible working hours: our working hours are tailored to your needs;
Possibility to work from home and a financial starter package for individual use;
Remote work within the EU: Work up to 20 days a year from an EU country of your choice;
Stress-free commute: Optimal accessibility by public transport;
Support from the works council
benefit from a wide range of subsidies and offers;
Vaccination campaigns, check-ups and blood donation campaigns are offered on site on an ongoing basis.
Free & anonymous coaching sessions for personal and professional challenges;
We cover 50% of your annual public transportation ticket;
We offer various training opportunities to help you grow professionally and personally;
Whether it's a summer party, an after-work get-together on the roof terrace or punch in winter
there are many opportunities to network and celebrate

IT Security Specialist – Red Team

Key skills