Senior Cyber Security Engineer (Application & Cloud Security) - (f/m/d) - Berlin based

Hello There! People At Humanoo Are Happy To Greet You!

• Location: Berlin (Hybrid)
• Start: ASAP
• Employment: Full-time, permanent

With a team of 90 people from over 28 nationalities, Humanoo, a Telus Health company, is building a unique holistic platform that makes people healthier. We are ambitious, goal-oriented, and enjoy creating a positive, inclusive atmosphere.

You’ll join us as part of TELUS Health’s Chief Security Office (TH CSO) – a globally recognised, mature cyber security organisation protecting healthcare technologies worldwide. This role will empower you to lead and shape security practices across our European business, while collaborating with a global team of top cyber professionals and technologists.

You’ll act as the cyber security lead for Humanoo and support the broader European region across security services, product security design, and incident response. This is more than a job — it’s a high-impact mission to secure our health-tech products at global scale.

How You Will Spend Your Time:

• Be the go-to cybersecurity expert for Humanoo and our EU region, reporting to both the CIO (Christophe Klarner) and TELUS Health CSO Director (Kevin Watkins)
• Drive adoption of TH CSO services in vulnerability management, incident response, detection & monitoring, DevSecOps, cloud and application security
• Collaborate with developers to embed secure-by-design principles and contribute to secure architecture, threat modelling, and secure code reviews
• Own the local response to cyber incidents, ensuring rapid and effective resolution in collaboration with the global CSO team
• Coordinate penetration testing, vulnerability assessments, and dynamic application testing, supporting remediation and ensuring audit readiness
• Support and shape the design of scalable security solutions, contributing to both global and regional CSO services
• Travel occasionally across Europe to collaborate with other business units, ensuring consistent implementation of our security strategy
• Contribute to our “shift-left” approach by automating security testing into CI/CD pipelines
• Deliver technical security consultancy to product and infrastructure teams with clarity and influence
• 5+ years of demonstrable experience in IT/network security — ideally within professional or consulting capacity

What You Should Bring To The Table:

• 3+ years of experience with penetration testing, vulnerability scanning, red teaming, or application security (web or mobile)
• 2+ years in development, DevOps or DevSecOps environments
• Confident scripting across languages (e.g. Python, PowerShell, JavaScript, Bash)
• Experience conducting security assessments aligned with frameworks such as OWASP, MITRE ATT&CK, (M)ASVS
• Ability to communicate security findings to both technical and non-technical audiences
• Comfortable working cross-functionally across time zones and geographies
• Flexibility and a love for solving the unknown — you don’t shy away from complexity

Nice To Haves

• Reverse engineering or exploit development experience
• Contributions to open-source security tools or research
• Experience mentoring junior talent or giving internal workshops

Certifications

(We don’t expect all of these, but two or more would be ideal!)

• Penetration Testing:

CREST CRT, OSCP, OSCE, OSEP, GPEN, eCPT/X, HTB CPTS, OSWP, PNPT

• Red Teaming:

Crtp, Crto (1/2), Crte

• Application Security:

BurpSuite Certified Practitioner, OSWE, GWAPT, eWPT

• Mobile Security:

Gmob, Emapt

• Cloud Security:

Ccsp, Cartp, Cawasp, Pacsp

• Devsecops / Security Automation:

Hands-on experience with security tools integrated into CI/CD pipelines

***Background Check Requirement
Due to the sensitive nature of this role and the access it entails to confidential systems and data, the successful candidate may be required to submit a Führungszeugnis (Certificate of Good Conduct) issued by the German Federal Office of Justice.

This request will be made only once a conditional offer of employment has been extended, and it will form part of the final onboarding process.

The certificate will be used solely for assessing suitability for the role, and in accordance with applicable data protection laws (GDPR & BDSG). It will not be retained beyond what is necessary and access will be restricted to designated HR personnel.

What We Offer

A sneak peek into your benefits:

• Additional health insurance coverage for 900 EUR per year
• 30 days of remote work allowance
• Up to 33 days annual vacation allowance (28 base days, + yearly tenure bonus up to 3 days, + 2 days for using the Humanoo app!)
• Subsidy for your UrbanSportsClub membership
• 70 EUR monthly cashback to cover daily expenses
• 500 EUR yearly personal learning and development budget
• Self-development days allowance (workshops, conferences, training sessions etc.)
• Team events and company events
• Referral bonus for employees

• Corporate Benefits

• Humanoo For Humanoos!

• Employee Assistance Programme (EAP) for mental well-being

Please note: our offices close over the Christmas and New Year period for approximately two weeks. We gift the 24th and 31st December as extra vacation days and any additional non-public holiday days during this time will be taken from your annual leave.

What We Stand For:

• Customer First: We create meaningful, human connections to improve outcomes for our customers and our communities, powered by our world-leading technology, collective ingenuity and culture of caring.
• Embrace Change: We challenge the status quo, experimenting and taking calculated risks to differentiate ourselves from our peers and deliver consistently leading results.
• Grow Together: We welcome everyone to bring their whole self to work, appreciating our uniqueness and always standing together as one team.