Senior Security Engineer

Manning Global, an Internationally renowned staffing and managed services organization specializing in providing staffing solutions for leading corporations in AI, IT & Telecoms, Engineering, Digital Media, Automotive and Renewable Energy is recruiting for Senior Security Engineer on behalf of one of their blue-chip international clients to join their organization in the Germany, Munich.

Key Responsibilities

What We Expect You to Do – Roles & Responsibilities

• Own and define the overall security architecture for industrial connectivity platforms.
  

• Design secure network architectures, trust zones, and network segmentation across
  

IT and OT environments.

• Implement and manage reverse proxy configurations, TLS termination, and secure communication channels.
  

• Harden Linux systems, container environments, and OCI-based deployments.
  

• Implement container isolation, image verification, secrets management, backup, and disaster recovery mechanisms.
  

• Manage secure deployments using Docker, Docker Compose, and Kubernetes.
  

• Design and implement API security, authentication, authorization, and service-to-service identity mechanisms.
  

• Identify and address security vulnerabilities, including OWASP-related risks.
  

• Implement PKI infrastructure, X.509 certificate management, TLS/mTLS, and EST- based certificate provisioning.
  

• Manage Certificate Authority operations and secure cryptographic key storage using PKCS#11, SoftHSM, or HSM.
  

• Secure MQTT broker communication through authentication, authorization, and ACL configurations.
  

• Define and enforce database access control and security policies.
  

• Establish software supply chain security practices, including dependency management, SBOM generation, and artifact signing.
  

• Secure CI/CD pipelines, application secrets, and authenticated offline software update mechanisms.
  

• Implement security logging, monitoring, incident response, and vulnerability disclosure processes.
  

• Conduct CRA risk assessments and prepare security-related technical documentation.
  

• Review, develop, and maintain Python/FastAPI backend and integration code, including automated tests.
  

• Collaborate with embedded engineering teams to validate interfaces and ensure end-to-end platform security.
  

• Drive security reviews, identify potential risks, and ensure security best practices are followed throughout the development lifecycle.
  

Experience/Qualifications:

• Experience: 10+ Years
  

• Technical Skills Required
  

• Strong experience in network security architecture, network segmentation, and trust-zone design.
  

• Hands-on experience with reverse proxies, TLS termination, and OT/IT network integration.
  

• Strong knowledge of Linux security and hardening.
  

• Experience with OCI container security, container isolation, and image provenance.
  

• Hands-on experience with Docker, Docker Compose, and Kubernetes.
  

• Strong understanding of API authentication, authorization, and service-to-service identity management.
  

• Knowledge of OWASP security vulnerabilities, tenant isolation, and audit mechanisms.
  

• Strong experience with X.509, PKI, TLS, mTLS, and EST.
  

• Experience in Certificate Authority (CA) operations and key management.
  

• Knowledge of PKCS#11, SoftHSM, and Hardware Security Modules (HSM).
  

• Experience with MQTT broker authentication, authorization, and Access Control Lists (ACLs).
  

• Knowledge of database security and access control.
  

• Experience with software supply chain security, dependency management, and Software Bill of Materials (SBOM).
  

• Knowledge of artifact signing, CI/CD pipeline security, and secrets management.
  

• Experience with secure offline software updates.
  

• Knowledge of security logging, monitoring, and incident response.
  

• Understanding of CRA (Cyber Resilience Act) risk assessments and technical documentation.
  

• Ability to work with Python and FastAPI backend code, including integration and testing.
  

• Basic ability to read and understand embedded C code to validate software interfaces.
  

Good to Have:

• Knowledge of IEC 62443 industrial cybersecurity standards.
  

• Experience with Operational Technology (OT) deployments.
  

• Familiarity with enterprise PKI and provisioning services.
  

• Knowledge of BRSKI/MASA.
  

• Experience with secure boot and firmware signing.
  

• Experience coordinating penetration testing activities.