Senior Security Engineer for Vulnerability Management & Application Security - Senior Specialist IT Security Management (m/w/d)
Deutsche Pfandbriefbank AG
Garching bei München
Deutsche Pfandbriefbank AG (pbb) is an international specialized commercial bank with over 800 employees from 37 countries. We offer our customers a wide range of financing and investment solutions for the entire real estate value chain. Our goal is to contribute to a more sustainable world of real estate.
For our CIO/COO business area based in Garching near Munich, we are currently seeking to hire, with immediate effect, a
Senior Security Engineer for Vulnerability Management & Application Security - Senior Specialist IT Security Management (m/w/d)
About the role
Build security into cloud platforms, infrastructure and applications. In this senior hands-on role, you will engineer secure configurations, identity and secrets management, and automated controls alongside platform and development teams. Your focus is delivering reliable security capabilities, including secure AI adoption, rather than day-to-day SOC alert handling.
Cloud & Infrastructure Security
Build and improve AWS and Azure security controls across identity, networking,
encryption and logging
Review cloud architectures and infrastructure code; harden systems, containers and
Kubernetes workloads with engineering teams
Identity, Secrets & Key Management
Implement least-privilege access for people and workloads, reducing shared and
long-lived credentials
Integrate secrets management such as HashiCorp Vault or Azure Key Vault into
applications and CI/CD; automate credential and certificate lifecycles
Security Automation & Infrastructure as Code
Build tested security automation using Python, shell scripting and REST APIs
Use Terraform, Git and policy-as-code to embed secure defaults and automated
checks into delivery pipelines
Security Tooling & Incident Support
Engineer telemetry, detection and response integrations, including Cribl and Microsoft
Sentinel, with the SOC
Support complex incidents at L3 level and implement lasting fixes for cloud and
infrastructure weaknesses
Application & AI Security
Review application designs and code; integrate SAST/DAST, dependency and secrets
checks into CI/CD and verify remediation
- Assess AI applications, LLM integrations and agents for prompt injection, sensitive-
data exposure and excessive permissions; implement and test access controls, output
validation and approval gates for high-impact actions
Technical Delivery & Documentation
Validate provider deliverables and maintain practical architecture documentation,
unbooks and operational handovers
Translate governance requirements into testable controls and maintain audit evidence
and remediation records
Requirements
Must-have
Cloud: Hands-on security engineering in AWS or Azure, with depth in IAM, networking, encryption and logging
Secrets and identity: Practical experience with HashiCorp Vault, Azure Key Vault or equivalent, including integration, access policies and credential rotation
Automation: Python, shell scripting, REST APIs, Git and infrastructure as code such as Terraform
Infrastructure: Strong Linux/Windows, networking, DNS and TLS fundamentals, plus container and Kubernetes security experience
Delivery: Experience building security controls, reviewing designs and code, and verifying remediation. Practical capability matters more than degrees or years served
Communication: Fluent English and clear explanations of technical decisions and trade-offs
Only for holders of EU work permit
Nice-to-have
Advanced Vault, workload identity, PKI or privileged access management experience.
Multi-cloud security, posture management, policy-as-code or automated remediation
AI security experience: LLM threat modelling, prompt-injection testing, data protection and agent permission controls
Secure SDLC, Cribl/Microsoft Sentinel or complex incident investigation experience
Regulated-industry experience or familiarity with DORA/NIS2
Who You Are
You take ownership, solve problems pragmatically and collaborate closely with engineers
You communicate clearly, document rigorously and bring proposals, not just problems
What we offer
A senior individual-contributor role with end-to-end technical ownership
Hands-on cloud, automation and AI security work, with investment in tooling and development
Competitive compensation and hybrid working in Garching near Munich.
Sounds exciting?
So let's shape the future of real estate together. Apply now to join #teampbb in just a few clicks!
Hubert Lohr
HR Business Partner
+49 89 2880-10126