1KOMMA5°

We are looking for you as an addition to our tech-team in Berlin, Munich or Hamburg. 1KOMMA5° is building Germany´s largest one-stop-shop for sale, installation and services related to solar, heat pumps, electricity and charging infrastructure. And they are all connected! Be a part of our mission!

Your mission

In tech we have two main work streams:

• Heartbeat: Building a virtual power plant levering our energy manager “Heartbeat” and evolving the customer experience app around this
• Operating System for installation companies: Digitisation of operations and processes from ground operations to rooftop installations

As a Security Engineer in 1KOMMA5°, you'll be at the forefront of strengthening our digital infrastructure. You'll work collaboratively with our skilled Site Reliability Engineers (SREs) and Platform Engineers to enable delivery teams to create robust, secure, and reliable systems. Your expertise will play a pivotal role in ensuring the confidentiality, integrity, and availability of our applications, contributing to our growth and success.

Key responsibilities include but are not limited to:

• Collaborate closely with delivery teams to integrate security measures into the development lifecycle of mobile and web applications.
• Perform regular vulnerability assessments, penetration testing, and security audits to identify potential risks and vulnerabilities.
• Develop and execute incident response plans, rapidly addressing and mitigating security breaches to minimize impact.
• Monitor network and system logs, analyze security alerts, and conduct in-depth investigations to proactively detect and prevent security threats.
• Work to ensure compliance with industry standards and regulatory requirements, staying up-to-date with the latest security trends and best practices.
• Educate and train employees and users on security best practices and protocols to foster a security-conscious culture.
• Prepare detailed documentation and reports for management and stakeholders, effectively communicating the organization's security posture.

Technologies you will work with include:

• JavaScript/NodeJS (VueJS/NestJS)
• Ruby on Rails
• Python (data ingestion / data lake)
• Google Cloud Platform
• Terraform/Terramate
• IoT/web/mobile applications
• Git (GitHub)
• OAuth2 (Auth0)
• OpenTelementery (Datadog)

Your profile

You have:

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• Proven experience as a Security Engineer with expertise in mobile and web application security.
• Experience in software development with multiple general purpose programming languages (ideally Ruby and TypeScript)
• Strong knowledge of security protocols, cryptography, authentication, and authorization mechanisms.
• Familiarity with industry standards and regulations such as ISO 27001, NIST, and GDPR.
• Hands-on experience with security tools and technologies, including SIEM systems, IDS/IPS, and penetration testing tools.
• Excellent problem-solving skills and the ability to communicate complex security concepts to technical and non-technical stakeholders.
• Experience quickly finding your way around in cross-functional teams in a fast pace, interdisciplinary working environment
• An agile and result-oriented mindset and you consider yourself a team player
• Very good knowledge of spoken and written English, German is a plus

Bonus points for:

• Relevant security certifications (e.g., CISSP, CompTIA Security+, Certified Ethical Hacker)
• Experience with continuous delivery, cloud infrastructure (ideally Google Cloud) and DevOps practices
• Experience and interest in climate tech industry

We are an ambitious and dynamic company with a talented team. We require our engineers to be imaginative, enthusiastic, and willing to tackle new challenges as we strive to provide everyone with renewable energy technologies.

Benefits

• The opportunity to travel, work mobile and individually
• Individualized opportunities for professional development
• Being part of a global change movement
• Working in a diverse team with hard workers and real team players
• Seeing the impact of your work, daily