Red & Purple Teaming: Planning and executing realistic red-team scenarios (on-premises & cloud)
Identifying and documenting vulnerabilities and attack paths
Conducting purple-team engagements to validate detection and response capabilities
Adapting attack techniques based on defensive tooling
Deriving concrete improvements for both offensive and defensive measures
Clear reports and briefings for technical and non-technical stakeholders
Tracking and supporting the remediation of findings
Collaborating on incident response during cybersecurity incidents, including on-call support for analysis, containment, and recovery
Improving playbooks, detection rules, and workflows
Penetration testing support: planning and coordinating external penetration tests (scope, timing, stakeholders)
Supporting internal teams during execution
Enablement & training: delivering trainings and workshops
Sharing knowledge on techniques and lessons learned
Mentoring and fostering a security culture
Supporting international teams and collaborating with IT security

2–5+ years of experience in offensive security / red teaming / penetration testing (hands-on required)
Good knowledge of attacker techniques (TTPs)
Understanding of defensive security (SIEM/SOC, detection, logging)
Solid knowledge of Windows, Linux, Active Directory, and enterprise architectures
Fundamentals in web, network, and cloud security
Ability to communicate risks clearly and document them thoroughly
Strong communication and stakeholder management skills
Team player with a focus on execution and alignment
Excellent English skills; good German skills
Certifications (e.g., OSCP, CPTS) are a plus

An onboarding plan, welcome events, and a buddy system ensure a smooth start
Flexible working hours: our schedule adapts to your needs
Discounted DO&CO canteen at the office, and a meal allowance for home office
On-site vaccination campaigns, preventive health check-ups, and blood donation drives are offered regularly
Free and anonymous coaching sessions for personal and professional challenges
Modern, bright office with break areas in the city center and up-to-date IT equipment to enable effective collaboration
Opportunity to work from home and a financial starter package for personal use
Whether summer parties, after-work drinks on the rooftop, or mulled wine in winter—there are many opportunities to network and celebrate together
Remote work within the EU: work up to 20 days per year from an EU country of your choice
Stress-free commute: excellent public transport connections
Support from the works council—benefit from a variety of subsidies and offers
Discounted insurance and a company contribution provide good coverage; additionally, vouchers for supermarkets, perfumeries, furniture and hardware stores, and more are available
We offer various training and development opportunities to grow professionally and personally
We cover 50% of your annual public transport pass

IT Security Specialist – Red Team

Key skills