IT Security Engineer (all genders)

Support us in designing the insurance experience of the future. As an IT Security Engineer you own IT Security Operations at getolo end to end: running our detection and response capability day to day, keeping endpoints and infrastructure hardened, and driving incidents, vulnerabilities and findings to closure. Security operations is the core of this role. Beyond it, you bring an operator's perspective into how we design systems and into our governance work, to ensure control effectiveness.This is a full-time hybrid role, with 1–2 days per week working from our Berlin office.RequirementsYour MissionSecurity Operations - your primary functionRun and continuously improve our SIEM: log source onboarding, detection rules, tuning, alert qualityAutomate orchestration and response with SOAROperate endpoint protection across our fleetTriage and manage alerts, driving them to closure or escalationLead incident management from detection through containment, recovery and post-incident reviewDetect and remediate configuration drift against hardening baselines; run technical auditsOversee vulnerability management: scanning, prioritisation, and remediation tracking with IT and engineeringPlan and coordinate penetration tests (internal and with external providers) and drive remediationSecurity Architecture - supportingContribute to security best practices and standards for infrastructure, endpoints, identity and SaaSBring security design input into new systems and projects earlyAct as a security advisor to IT, engineering and the wider businessSecurity GRC - supportingFeed operational reality into security policies, the risk register and control designSupport internal and external audits with evidence collection and remediation of findingsContribute to security awareness trainingsSupport third-party and vendor security assessmentsDeliver operational input for management reporting on security posture, KPIs and incidentsWhat You Will Need to Succeed4+ years in security operations, S