Job
In this position, you review automated security scans, consolidate reporting, support DevSecOps pipelines, advise on secure-by-design principles, and plan as well as perform individual security measures.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are responsible for reviewing and evaluating results from automated security scans (SAST, Software Composition Analysis / Dependency Scans, Vulnerability and Cloud Security Scans).
- You monitor and consolidate reporting of security findings across applications and systems to product management and the InfoSec team.
- You support the Solution Architects in the development and further advancement of DevSecOps mechanisms along the CI/CD pipelines.
- You advise on Secure-by-Design and Secure Coding principles.
- You create, maintain, and further develop MIKE-specific security documentation as a supplement to existing corporate and company documentation.
- You assist in deriving policies for playbooks, architecture, and development guidelines to ensure compliance with regulatory requirements (e.g., NIS2, ISO 27001).
- You plan, coordinate, and execute individual security measures (e.g., penetration tests, targeted application reviews, threat modeling).
- You are an interface to corporate IT security, specialist departments, and external partners (e.g., audits).
Our expectations of you
Qualifications
- You have an understanding of security standards and regulatory requirements (e.g., ISO 27001, NIS2).
- You have knowledge of agile software development.
- You possess relevant certifications (e.g., CISSP).
- You are familiar with the terms SAST, SCA, DevSecOps, and know how to interpret them.
- You are someone who enjoys questioning the "established processes," lives security, and seeks collaborative solutions.
Experience
- You have several years of experience in information security, IT compliance, or IT risk management.
- You have experience with audits and assessments.
- You have experience or a strong interest in current topics such as Cloud Security or AI in the Security field.
What we offer
- Your contribution provides a significant added value to the protection and availability of critical European transport and logistics infrastructure.
- You actively contribute to the development and establishment of security processes and bring in your ideas as well as your professional expertise.
- You can expect a pragmatic, practice-oriented, and solution-focused collaboration with experienced development, architecture, and security teams.
- You benefit from flexible working hours and modern work models that support a good work-life balance.
- The health of our employees is important to us, which is why we regularly offer health check-ups.
- A secure and sustainable job with exciting tasks.
- Excellent training opportunities as well as numerous development prospects within the group.
- For the position of "Senior Specialist: Information Security Management," a minimum gross annual salary of €55,307 is provided according to the collective agreement for employees of Austrian railway companies, based on a 38.5-hour workweek. Depending on qualifications and professional experience, overpayment is possible.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
With 5,755 employees, subsidiaries throughout Europe and an annual turnover of 1.9 billion euros, the Rail Cargo Group ranks among Europe's leading rail logistics companies. We operate a comprehensive end-to-end logistics network and we link European conurbations and ports with prospering economic centres on the Eurasian continent.
- Established Company
- Hybrid, Onsite
- Logistics, Transportation
More jobs
These jobs might also interest you
We are a modern IT service company and support corporate clients across all areas of IT infrastructure – from workstation systems and servers to networks, firewalls, and cloud solutions. To expand our team, we are looking for one IT Technician / IT...
Do you enjoy diving deep into code and want to build a product that truly makes an impact? With us, you work hands-on on an AI platform that combines SaaS and on-premises, exclusively relies on open source, and successfully implements AI on-prem and...
Be the low level technical expert on our game dev team, especially in all things networking and multiplayer. Design high level network architecture for our games using a Godot based tool chain. Develop tools for the dev team and extend the engine if...
