IT-Security Engineer - Specialization: Red Team Operator (m/f/d)

Location: 51149 Köln | Contract type: full/part time, unlimited | Job-ID: 961621

Your Home of IT: REWE digital We are the home for all those who cheat in the digital world. A tech team in which IT and non-IT specialists work together in a variety of areas. Together, we bring innovations to life – for the trade and everyday life of millions of people. Your potential is the basis for our progress. We celebrate and promote you as you are. So we create the best conditions to achieve great. So try out and find out in our digital world what enthuses you: from app development and agility to monitoring and market digitalization to number systems and collaboration.

Develop technologies that the world has not yet seen. Welcome to your Home of IT! In your new Home of Security Engineering, innovation and security go hand in hand. Here we meet new challenges every day, in a dynamic environment where we believe that the best defense is a good attack to strengthen the security of REWE Group's IT infrastructure. Take a central role in the ''Recon'' team, and use your skills to identify proactive vulnerabilities through comprehensive attack simulations and continuously optimize our security architecture.

Tasks that keep you You plan and execute realistic attack simulations – based on frameworks such as MITRE ATTACK and TIBER-EU – and develop tailor-made tactics, techniques and procedures (TTPs) to replicate real threat players You use both Open Source and Commercial Command & Control (C2) frameworks and develop your own tools, scripts and payloads to implement complex attack scenarios You are an expert for attack techniques - from social engineering (e.g. phishing) to network exploration (e.g. Lateral Movement, Privilege Escalation) to physical intrusion testing. You develop realistic malware and exploits that target our security controls and make vulnerabilities visible. You can document your activities in a comprehensible manner, participate in after-action reports and provide concrete recommendations for risk mitigation and strengthening of defense. You actively guide Opensive Security workshops, support tabletop and wargaming exercises and work closely with the Trusted Agent to comply with the rules of the simulation. You will strengthen our Blue Team with targeted Purple Teaming – with the aim of optimizing our Detection Rules and increasing REWE’s resilience digitally. You continuously develop our Red Team methods, keep our infrastructure up-to-date and integrate current TTPs from the Threat Intelligence world into your work.

Features that make you You are a communicative team player with analytical thinking, enthusiasm for new technologies and attack techniques. With your own initiative, creativity and an open mindset, you continuously develop yourself and your environment A successfully completed study of computer science Funded technical and organizational understanding in the field of IT security, architecture, DevOps and/or software development Very good knowledge of operating systems, networks, firewalls, antivirus software, EDR/XDR and cloud security solutions Experience in the development and operation of connections and/or infrastructure Practical experience with Incident Response processes – ideally also from the perspective of the Servicedesk or DevOps teams First contact points with Physical Security – e.g. B. when cracking locks Certifications such as eJPT, OSCP, HTB CPTS, GPEN, GRTP or CRTO/CRTLO are a plus Experience as Blue Teamer or SOC analysts are advantageous

Basics that make life even better Your life-work integration through flexible working hours, mobile work, 30 days vacation + regional customs days, temporary models (sabbatical, nursing time etc.) and farm kindergarten We're investing in your future. With your annual training budget of about €2,000 you can learn about your individual skills development. So stay curious and collect on our own learning platform, the 'IT Learning Hub', at specialist conferences, in specialist books or in one of many free workshops from our Learning Canvas new input for you and us all Updates for you at in-house workshops and events, such as the Hackathon and Tech Talks as well as weekly stand-ups, regular Tech All-Hands and Open Door formats Your design playroom in the co-determination of your hardware (MacBooks, ThinkPads) and the operating system (MacOS, Linux, Windows) - are looking forward to a modern IT equipment as well as a broad and innovative tech stack Your impact because you develop applications and services for millions of people - with over 1 billion records daily, over 6 million mobile phones, 32,000 cash registers or in 7,300 markets Your relaxed working path with the discounted Germany ticket, a job bike and parking right outside the door Our networks like DITO - different together, SHINE, f.ernetzt, WomEngineers @REWE digital as well as Women's Drive make us a colorful community and support you in your personal development Benefits of a group for you, e.g. in the form of discounts at REWE, PENNY, toom Baumarkt and DERTOUR Group, a comprehensive healthcare service, a support for your pension in the form of asset-effective services and REWE-Pensionskasse, special services such as holiday and Christmas money, etc.

For more information, see rewe-digital.com.

We look forward to your online application with your availability and salary presentation. We cannot send back application documents in paper form.

You have questions about this position (Job ID: 961621)? Then register with our application hotline at 0221 149-7110.

We stress that all people - regardless of gender/sex identity, ethnic origin and nationality, social origin, religion/worldview, physical and mental abilities, age as well as sexual orientation or other individual features - are equally welcome.