IT Security Specialist (f/m/d) - Red Team

Competencies: Finding effective solutions; Action Oriented; Ensures Accountability; Strengthening ownership

As one of the leading insurance companies, we know that together we can achieve more. At UNIQA, we are therefore the community for a better life. We use our individual skills to shape a better future together. Tell us about your strengths and apply at UNIQA IT Services GmbH (UITS), the IT service provider of the UNIQA Group, as IT Security Specialist (f/m/d) - Red Team

What to expect:

Red Teaming and Purple Teaming

• Plan and execute realistic red teaming scenarios across on premises and cloud environments
• Discover and document vulnerabilities and attack paths during engagements, using a mix of manual testing and automation where appropriate
• Deliver purple teaming engagements together with our defensive team to validate detection, response, and resilience
• Work with defence tooling to understand which activities were detected, and adapt techniques where needed to avoid detection and strengthen realism
• Translate results into clear, actionable improvements for both offensive and defensive capability
• Provide concise reporting and briefings for technical and non technical stakeholders
• Drive remediation follow up by tracking findings, coordinating with delivery teams, and pushing for closure of security issues

Incident Response and On Call Duty

• Participate in cyber security incident response, including on call duty where required
• Support investigations, containment, and recovery activities with an attacker mindset
• Contribute to improving playbooks, detection rules, and response workflows based on incidents and exercises

External Penetration Test Planning and Support

• Plan and coordinate external penetration tests end to end, including scoping, scheduling, stakeholder alignment, and logistics
• Support internal teams during the engagement and help remove blockers for successful delivery

Enablement and Training

• Create and run internal training programs for team members and stakeholders to raise offensive and defensive capability
• Share techniques, tradecraft, and lessons learned through workshops, labs, and knowledge sessions
• Mentor colleagues and contribute to a strong, collaborative security culture
• Support other UNIQA countries with security expertise and offensive security engagements when needed
• Work closely with the broader IT security team and contribute to other security areas when required

What we expect:

Experience and Background

• 2 to 5+ years of professional experience in offensive security, red teaming, or penetration testing, with prior hands-on experience as a red teamer / penetration tester (required)
• Solid understanding of attacker tactics, techniques, and procedures and how to apply them in controlled, ethical engagements
• Good understanding of defensive security concepts, including detections, logging, alerting, and common SIEM SOC workflows

Technical Skills

• Strong foundation in Windows and Linux, Active Directory, identity, and common enterprise architectures
• Understanding of web, network, and cloud security fundamentals
• Ability to communicate technical risk clearly and produce high quality, decision ready documentation

Ways of Working

• Strong stakeholder management and communication skills in a corporate environment
• Collaborative mindset with the ability to influence, drive alignment, and keep remediation moving across multiple teams
• Fluency in English is required; proficiency in German is an advantage
• Offensive security certifications such as OSCP, CPTS are also a strong plus

Benefits: An onboarding plan, welcome events and a buddy system will give you the best possible start; A discounted DO&CO canteen is available to you in the office, and you will also receive financial support for meals if you work from home; A modern & bright office with break areas in the heart of the city as well as modern IT equipment provide a good environment; Discounted insurance and a company subsidy provide security. Additionally vouchers for supermarkets, perfumeries, furniture and hardware stores and much more can be purchased; Flexible working hours: our working hours are tailored to your needs; Possibility to work from home and a financial starter package for individual use; Remote work within the EU: Work up to 20 days a year from an EU country of your choice; Stress-free commute: Optimal accessibility by public transport; Support from the works council - benefit from a wide range of subsidies and offers; Vaccination campaigns, check-ups and blood donation campaigns are offered on site on an ongoing basis. Free & anonymous coaching sessions for personal and professional challenges; We cover 50% of your annual public transportation ticket; We offer various training opportunities to help you grow professionally and personally; Whether it's a summer party, an after-work get-together on the roof terrace or punch in winter - there are many opportunities to network and celebrate