Platform Security Architect (m/f/d)

As Platform Security Architect (m/w/d), you are the most important security expert for our infrastructure and development teams. In addition to your daily operational tasks, you focus on building security governance, securing our cloud-native environments and promoting our ISO 27001 compliance and maturity of our zero-trust approach. You act as a link between development, operation and compliance. Security Governance & Compliance: You are leading in adapting our technical infrastructure to the ISO 27001 standards. You define, care and implement security policies and procedures across the company. Security Architecture & CNAPP: You unleash and optimise architecture for our cloud-native environments, focusing on managing CNAPP solutions and workflows to ensure consistent transparency and protection. Integration of Secure SDLC (SSDLC): You work with the development teams and integrate the security aspect into the development lifecycle to ensure that threat modeling and vulnerability management are seamlessly integrated into our technologies and processes. Cross-functional cooperation: As a key player for our development and infrastructure teams, you train them in the principles of “Secure-by-Design” and help them reconcile the speed of feature development with robust security controls. Risk and vulnerability management: You introduce proactive processes for vulnerability management, prioritise risks based on their business relevance and ensure that remedial measures are tracked and implemented effectively.

Your success factors Education and experience: A degree in the fields of (IT) security, computer science or a related subject area. Security expertise: Funded knowledge in the area of cloud-native security, including CNAPP tools, container security and backup of infrastructure-as-code. At least 10 years of experience in software development, including at least 5 years in a key role with security responsibility in an organization with more than 5 development teams. Methodological skills: proven experience in the application and testing of frameworks such as ISO 27001. You understand the PDCA cycle (Plan-Do-Check Act) and you know how control measures can be implemented in feasible technical tasks. Communication and engagement: You can translate complex security requirements into simple, implementable guidelines for teams outside the security area. You have the persistence of advancing changes and the empathy of promoting a “security-by-default” culture. Technical understanding: You have a strong understanding of modern threat scenarios and defence mechanisms in hybrid environments (e.g. OWASP Top 10, Zero Trust Principles). Architectural expertise: You have a well-founded knowledge of software architecture and system design and successfully apply common architectural patterns. Certifications: Ideally you have certifications such as CISSP, CISM or certifications in the field of cloud-native security (e.g. CCSP, Azure/GCP security architecture certifications). Languages: You have very good English skills (C1); German knowledge is advantageous.

Your Benefits We are a Great Place to Work Through an open and empirical working environment, Conrad offers you the optimal opportunity to actively participate in the future of the company and to develop yourself. For this unique corporate culture we have been awarded by the Institute Great Place to Work.Time for lifeThanks to flexible working time models, hybrid work and special leave, you have the opportunity to customise your working day according to your needs. Your young people are also at our heart: our 'Conrad Kids' are lovingly cared for at our central location in Hirschau. Communication at eye level We are a family business, so we are particularly important for family management. The du-culture is not only communicated with us, but also the flat hierarchies actually lived. We also healthy This is why we offer you a variety of services related to health care. The focus is on regular health checks and preventive checks. We also offer sports enthusiasts the opportunity to take advantage of various sports, courses or on our indoor tennis courts in our Conrad Sportverein. A healthy lifestyle naturally also includes a balanced diet. Therefore, in our canteens (Hirschau/Wernberg) we place particularly great emphasis on regionality and freshly prepared meals. At Conrad Electronic we actively promote the diversity and equality of all employees. Our bodies are open to all qualified applicants, regardless of their sex, nationality, ethnic or social origin, religion or belief, disability, age or sexual identity. .