Senior Security Engineer

Manning Global, an Internationally renowned staffing and managed services organization specializing in providing staffing solutions for leading corporations in AI, IT & Telecoms, Engineering, Digital Media, Automotive and Renewable Energy is recruiting for Senior Security Engineer on behalf of one of their blue-chip international clients to join their organization in the Germany, Munich.

Job Title:

Senior Security Engineer

Employment:

Full time-FTE 1 year

Start Date:

January 2027

Country:

Germany, Munich - Hybrid

Salary range:

100k - 110k dependent upon experience

Contact:

Ashwini Chawan on: +49 (0) 89 23 88 98 35

Key Responsibilities

What We Expect You to Do – Roles & Responsibilities

• Own and define the overall security architecture for industrial connectivity platforms.

• Design secure network architectures, trust zones, and network segmentation across

IT and OT environments.

• Implement and manage reverse proxy configurations, TLS termination, and secure communication channels.

• Harden Linux systems, container environments, and OCI-based deployments.

• Implement container isolation, image verification, secrets management, backup, and disaster recovery mechanisms.

• Manage secure deployments using Docker, Docker Compose, and Kubernetes.

• Design and implement API security, authentication, authorization, and service-to-service identity mechanisms.

• Identify and address security vulnerabilities, including OWASP-related risks.

• Implement PKI infrastructure, X.509 certificate management, TLS/mTLS, and EST- based certificate provisioning.

• Manage Certificate Authority operations and secure cryptographic key storage using PKCS#11, SoftHSM, or HSM.

• Secure MQTT broker communication through authentication, authorization, and ACL configurations.

• Define and enforce database access control and security policies.

• Establish software supply chain security practices, including dependency management, SBOM generation, and artifact signing.

• Secure CI/CD pipelines, application secrets, and authenticated offline software update mechanisms.

• Implement security logging, monitoring, incident response, and vulnerability disclosure processes.

• Conduct CRA risk assessments and prepare security-related technical documentation.

• Review, develop, and maintain Python/FastAPI backend and integration code, including automated tests.

• Collaborate with embedded engineering teams to validate interfaces and ensure end-to-end platform security.

• Drive security reviews, identify potential risks, and ensure security best practices are followed throughout the development lifecycle.

Experience/Qualifications:

• Experience: 10+ Years

• Technical Skills Required

• Strong experience in network security architecture, network segmentation, and trust-zone design.

• Hands-on experience with reverse proxies, TLS termination, and OT/IT network integration.

• Strong knowledge of Linux security and hardening.

• Experience with OCI container security, container isolation, and image provenance.

• Hands-on experience with Docker, Docker Compose, and Kubernetes.

• Strong understanding of API authentication, authorization, and service-to-service identity management.

• Knowledge of OWASP security vulnerabilities, tenant isolation, and audit mechanisms.

• Strong experience with X.509, PKI, TLS, mTLS, and EST.

• Experience in Certificate Authority (CA) operations and key management.

• Knowledge of PKCS#11, SoftHSM, and Hardware Security Modules (HSM).

• Experience with MQTT broker authentication, authorization, and Access Control Lists (ACLs).

• Knowledge of database security and access control.

• Experience with software supply chain security, dependency management, and Software Bill of Materials (SBOM).

• Knowledge of artifact signing, CI/CD pipeline security, and secrets management.

• Experience with secure offline software updates.

• Knowledge of security logging, monitoring, and incident response.

• Understanding of CRA (Cyber Resilience Act) risk assessments and technical documentation.

• Ability to work with Python and FastAPI backend code, including integration and testing.

• Basic ability to read and understand embedded C code to validate software interfaces.

Good to Have:

• Knowledge of IEC 62443 industrial cybersecurity standards.

• Experience with Operational Technology (OT) deployments.

• Familiarity with enterprise PKI and provisioning services.

• Knowledge of BRSKI/MASA.

• Experience with secure boot and firmware signing.

• Experience coordinating penetration testing activities.