Security Engineering Manager (m/w/d)

Why we need you

What to expect

• Own detection, triage, and resolution of security incidents across cloud, product, and corporate environments – ensuring fast, reliable response and continuously improving incident response playbooks and tooling (Microsoft Sentinel, Microsoft Defender).
• Own operational security monitoring across the multi-cloud estate (Azure as primary, plus AWS and GCP), tuning detections, alerting, and response workflows for fast and reliable threat handling.
• Drive vulnerability management end-to-end – coordinating scanning, prioritization, and remediation tracking with Nessus and Snyk in partnership with Engineering.
• Define security baselines and secure-by-default standards, and embed them into the software development lifecycle and infrastructure, integrating tooling such as Snyk into engineering workflows.
• Manage endpoint and identity security across Windows and macOS fleets using Microsoft Intune, Defender, and Purview, ensuring consistent hardening and data protection.
• Build and lead the operational security team – line-managing and mentoring engineers, contractors, and working students toward clear technical and delivery standards.
• Plan and deliver security awareness and enablement across the organization, including onboarding content and phishing simulations, translating risk into plain language for non-technical audiences.
• Partner with the AI transformation team to engineer security guardrails and monitoring for the responsible use of AI across the organization.

Your profile in short

• 5+ years in security operations or security engineering, preferably in a SaaS or B2B software environment.
• Experience owning security outcomes or domains end-to-end (not only contributing to them).
• Hands-on incident detection and response experience, including SIEM (Microsoft Sentinel), EDR/XDR (Microsoft Defender), and cloud security monitoring.
• Strong technical fluency across multi-cloud infrastructure (Azure primary; AWS and GCP) and endpoint/identity management (Microsoft Intune, Windows, macOS).
• Experience with vulnerability management and developer security tooling such as Nessus and Snyk, including coordinating remediation with engineering teams.
• Proven ability to define and embed security baselines and secure-default standards into engineering and infrastructure.
• Proven people leadership experience, including setting expectations, developing engineers, and holding teams accountable for delivery and technical quality.
• Clear communicator able to translate security risk into plain language for engineers and non-technical stakeholders.
• Comfortable acting as the primary operational security practitioner, setting technical direction independently while collaborating with a separate GRC function.
• Professional proficiency in English.

• Experience producing audit evidence for ISO 27001 / SOC 2 control operation and working with compliance automation platforms such as Vanta.
• Experience with Microsoft Purview for data security, DLP, or information protection.
• Relevant certifications such as CISSP, CISM, or Azure security certifications (e.g., AZ-500 / SC-200, SC-900), GIAC certification (GCIH, GCIA).
• Experience in engineering security guardrails or monitoring for AI / LLM usage.
• Experience in a scale-up or growth-stage company where security functions are being built rather than inherited.
• Professional proficiency in German

About this opening

Why you will love Maltego

• Insights into the daily operations of a fast-growing tech scale-up.
• Competitive compensation with a bonus/commission structure based on pipeline creation.
• Inclusive, diverse culture, where your voice and contributions matter.
• Supported language courses 
• Mental health support via .nilo (psychologists & digital tools)

Location

Required documents / information