Senior Security Analyst - Germany

Role overview Assess cyber risk, investigate security incidents and insurance claims, and turn technical findings into practical recommendations for prevention. This analyst also helps connect security insights to business and product decisions, including risk models, underwriting approaches, and internal security processes.

Responsibilities - Evaluate the security posture of current and prospective insured organizations across their technology, controls, and operating environments. - Investigate incidents and claims to establish likely causes, attack paths, control gaps, and prevention opportunities. - Advise customers and security leaders on prioritized improvements involving architecture, cloud security, data protection, and compliance. - Turn threat intelligence and observed attacker behavior into detection methods and actionable guidance. - Work with product and other teams to improve risk models, underwriting methods, and security applications. - Follow changes in security practice, regulation, and the industry to inform analysis and recommendations.

Requirements - Four to six years of experience in security analysis, defensive security, penetration testing, red-team operations, incident response, or a related field. - Strong knowledge of attack lifecycles, attacker techniques, exploitation methods, and network threats. - Familiarity with TCP/IP, network analysis, security tools, log analysis, and captured network traffic. - Ability to investigate incidents, identify root causes, and recommend preventive or detective controls. - Practical familiarity with frameworks such as NIST, ISO, HIPAA, or PCI. - Clear written and spoken communication for technical and executive audiences, and comfort working in a changing environment. - Fluency in both German and English, written and spoken.

Nice to have Experience with cyber insurance claims or translating security findings into underwriting or risk scores; cloud security, security architecture, data protection, or control assessments; threat intelligence and detection development; or advising security leaders on risk-based priorities.

Benefits and work setup Full-time, remote work from anywhere in Germany, with a German employment contract. Listed benefits include employer-paid supplemental health and AD&D insurance, 30 or more vacation days, a home office stipend, coworking access, and wellness programs.