Security Engineer

The GFZ Helmholtz Centre for Geosciences is one of the world's leading institutions in the field of geosciences. As part of the Helmholtz Association, Germany's largest research organisation, we address global challenges such as natural hazards, climate change and the sustainable use of resources. In doing so, we combine cutting-edge research with social relevance. Our international staff – around 1,200 employees and approx. 500 guests – work in a multidisciplinary way and with a unique infrastructure to research the dynamic processes of the Earth system. Our vision: “Taking the pulse of the Earth to safeguard a habitable planet.” In Department 5 – Geoinformation, we are looking for a: Information Security Engineer (f_m_x) Reference Number 11444 GFZ has many years of experience in providing digital services to the international scientific community.

This is built on an IT environment tailored to the requirements of scientific research settings, combining technical infrastructure, secure operations and sustainable service provision. Particular expertise lies in networking, identity and access management, and IT security. Within the Helmholtz Federated IT Services (HIFIS), this experience is now to be transferred to further research fields. Together with the Helmholtz Centres, we are developing practical standards and implementation guidance that strengthen the cyber resilience of federated research IT. For this purpose, we are looking for someone who combines technical understanding with security governance. The position reports to the Chief Information Security Officer (CISO) of GFZ and translates between technical and information security – both within GFZ and across the Helmholtz Association.

The focus is on architectural assessment rather than depth in individual technologies.

Your responsibilities:

• You develop technical minimum standards and reference architectures together with Helmholtz partners and support their implementation
• You assess architectures for protection requirements, threats and failure scenarios, and carry out architecture reviews
• You assess to what extent GFZ and the Helmholtz Centres are affected by the Cyber Resilience Act (CRA), derive the required implementation measures and advise software development teams
• You form the professional bridge to the CISO: you put technical matters into context and translate ISMS requirements into actionable specifications
• You contribute actively to handling IT security incidents and IT emergencies at GFZ and conduct emergency exercises
• You develop best practices and guidelines and prepare complex security topics in a way that suits the respective audience

About You:

Essential Qualifications:

• Academic university degree (Master's degree or German university Diplom) in computer science, IT security or a comparable discipline
• Several years of experience in information security or security architecture, as well as the ability to assess IT architectures and to explain technical matters appropriately for the respective audience.
• Specialist depth in individual technologies is not required
• An understanding of modern IT architectures: data centre operations, virtualisation, network and cloud infrastructures
• Sound knowledge of the relevant standards and regulations (BSI IT-Grundschutz, ISO/IEC 2700x, NIS2, Cyber Resilience Act) and of IT emergency management in accordance with BSI Standard 200-4
• Very good communication and advisory skills when dealing with both technical and non-technical audiences; German at level C2 and English at level C1 (CEFR), spoken and written

Desirable Qualifications:

• Experience in the research, higher education or public sector, as well as with federated and open-source environments
• Experience in advising software development teams on secure development
• Certifications with an architectural and hands-on focus, e.g. SABSA, TOGAF, CCSP, CISSP, BSI IT-Grundschutz Practitioner or ISO/IEC 27001 Lead Implementer
• Knowledge of BCM, IT emergency planning and recovery strategies for central IT components

Passion and potential matter to us!

What we offer:

• Ambitious and varied tasks in a dynamic and international research environment
• State-of-the-art equipment
• Public service benefits
• Extensive training opportunities
• Flexible working hours and conditions
• Support with finding a good work-life balance offered by benefit@work
• Institute day-care centre on site
• Working at the Albert Einstein Science Park on the Telegrafenberg in Potsdam
• Workplace within walking distance of Potsdam main train station, or just a short ride on the shuttle bus
• Start date: As soon as possible
• Fixed-term: 2 years (with the option to apply for a permanent employment contract within the fixed-term period)
• Salary: The position is classed as salary group 13 according to “TVöD Bund”. The salary group is determined on the basis of the Collective Wage Agreement and the respective personal qualifications.
• Working hours: Full-time (currently 39 h/week); The position is generally suitable for part-time work.
• Place of work: Potsdam
• Important Technical Note: Currently, email addresses associated with domains such as @hotmail.com, @outlook.com, or @live.de may experience occasional delays or restrictions in receiving messages. To ensure smooth communication during the application process, we recommend using an alternative email address and providing an additional contact method (e.g., a phone number).

The GFZ actively promote diversity and equal opportunities.

We explicitly welcome applications from all qualified individuals, regardless of ethnic and social origin, nationality, gender, sexual orientation and identity, religion/belief, age, and physical or neurodiverse abilities.

“Diversity in perspectives” is one of GFZ's core values.

As an integral part of supporting diversity at our centre, we actively promote women in science and in leadership positions.

To know more about our Diversity policies, contact the diversity team.

We look forward to applications from people who enjoy working in diverse teams, where everyone feels respected and valued and can fully develop their own talents.

Applicants with severe disabilities and equalised persons will receive preferential consideration if equally qualified.

Data protection information for applicants In case of any further queries regarding the field of activity,

www.gfz.de