Job
In this role, you will analyze security scans, support DevSecOps practices in CI/CD pipelines, and develop policies to ensure compliance with regulatory requirements.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are responsible for reviewing and evaluating results from automated security scans (SAST, Software Composition Analysis / Dependency Scans, Vulnerability and Cloud Security Scans).
- You monitor and consolidate reporting of security findings across applications and systems to product management and the InfoSec team.
- You support the Solution Architects in building and further developing DevSecOps mechanisms along the CI/CD pipelines.
- You advise on Secure-by-Design and Secure Coding principles.
- You create, maintain, and further develop MIKE-specific security documentation as a supplement to existing corporate and company documentation.
- You assist in deriving policies for playbooks, architecture, and development guidelines to ensure compliance with regulatory requirements (e.g., NIS2, ISO 27001).
- You plan, coordinate, and execute individual security measures (e.g., penetration tests, targeted application reviews, threat modeling).
- You are an interface to corporate IT security, specialist departments, and external partners (e.g., audits).
Our expectations of you
Qualifications
- You have an understanding of security standards and regulatory requirements (e.g., ISO 27001, NIS2).
- You have knowledge of agile software development.
- You possess relevant certifications (e.g., CISSP).
- You are familiar with the terms SAST, SCA, DevSecOps, and know how to interpret them.
- You are a personality who enjoys questioning the "established processes," lives security, and seeks collaborative solutions.
Experience
- You have several years of experience in information security, IT compliance, or IT risk management.
- You have experience with audits and assessments.
- You have experience or a strong interest in current topics such as Cloud Security or AI in the Security field.
What we offer
- Your contribution provides a significant added value to the protection and availability of critical European transport and logistics infrastructure.
- You actively contribute to the development and establishment of security processes and bring in your ideas as well as your professional expertise.
- You can expect a pragmatic, hands-on, and solution-oriented collaboration with experienced development, architecture, and security teams.
- You benefit from flexible working hours and modern work models that support a good work-life balance.
- The health of our employees is important to us, which is why we regularly offer health check-ups.
- A secure and stable job with exciting tasks.
- Excellent training opportunities as well as numerous development prospects within the group.
- For the position of "Senior Specialist:in Information Security Management," a minimum gross annual salary of €55,307 is provided according to the collective agreement for employees of Austrian railway companies, based on a employment scope of 38.5 hours per week.
- Overpayment may be possible depending on qualifications and professional experience.
Benefits
Food & drink
Higher take-home pay
Topics you will work on
Job locations
About your employer
Wien, Villach, Graz, Knittelfeld, Innsbruck, St. Pölten, Linz
The ÖBB Group consists of three publicly traded companies that fall under the strategic umbrella of the ÖBB Holding AG. This conglomerate covers all business sectors within modern mobility, making it a strong and environmentally friendly railway system for the future.
- 250+ Employees
- 1923
- German, English
- Established Company
- Hybrid, Onsite
- Logistics, Transportation
Employer reviews
- Career growth
- 3.5
- Team culture
- 3.6
- Working conditions
- 3.6
- Engineering
- 2.8
More jobs
These jobs might also interest you
We are a modern IT service company and support corporate clients across all areas of IT infrastructure – from workstation systems and servers to networks, firewalls, and cloud solutions. To expand our team, we are looking for one IT Technician / IT...
Do you enjoy diving deep into code and want to build a product that truly makes an impact? With us, you work hands-on on an AI platform that combines SaaS and on-premises, exclusively relies on open source, and successfully implements AI on-prem and...
End-to-End Development:You accompany exciting software projects from the initial requirements analysis through implementation (e.g., with Spring Boot) to successful deployment. Microservices & Architecture:You design and develop robust, highly scalable...
