On - IT Security Lead (Threat Management and Cloud Architecture) - Berlin

Team for Career Site

Technology

In short

In the dynamic landscape of On, the tech thrives much like a spirited runner: always moving, always improving. We are building technology that continues to supercharge the growth of On, helping to ignite the human spirit through movement.

As an integral part of the Information Security team at On, you’ll find yourself at the heart of a fast-paced, diverse environment. Our ecosystem thrives on collaboration — a confluence of curious minds challenging and learning from one another, always seeking the uncharted. Here, we venture into new territories of technology and security, continuously refining our approach and embracing challenges head-on.

Your role will be pivotal in building synergies, reducing complexities, and prioritising essential work areas that further On’s mission.
As a strategic leader you will drive the development and implementation of secure architecture, cloud security and threat management strategies, embedding Zero Trust principles across all systems and processes safeguarding critical infrastructure, applications and data while enabling a resilient, forward-thinking security posture.

Your mission

– Lead Advanced Threat Analysis and Strategy overseeing the identification, assessment and mitigation of cyber threats, leveraging innovative defense strategies and threat intelligence to strengthen organizational security.
– Build and Maintain Secure Architecture, Application Security Practices and Cloud Security Framework integrating Zero Trust principles into system design, development processes, and cloud environments. Implement policies and controls to protect infrastructure, applications and data while aligning with security best practices.
– Collaborate and Support the IT Security Operations team by providing expertise and input on incident response processes including containment, mitigation and recovery, enhancing detection capabilities and optimizing response strategies.
– Lead Vulnerability Management and Service Delivery Efforts, ensuring vulnerabilities are identified, assessed and prioritized for remediation. Oversee the end-to-end management of the vulnerability management service, ensuring it operates efficiently, aligns with organizational objectives and meets global security standards and best practices. Collaborate with cross-functional teams to address risks and reduce the attack surface effectively.
– Training and Mentoring: Providing training and mentoring to team members, fostering a culture of learning and knowledge sharing within the organisation.

Your story

– With over 8+ years of hands-on experience in Threat Management, Secure Architecture, Cloud Security or/and Application Security with a focus on Zero Trust principles and modern security frameworks
– In-depth knowledge of cloud platforms (e.g. GCP, AWS, Azure), security tools (e.g. EDR, IDS/IPS) and secure system design. Familiarity with secure software development practices and vulnerability management tools
– Hands-on experience in threat analysis, detection rule optimization and supporting incident response efforts in collaboration with SOC and security operation teams
– Strong background implementing cloud security frameworks and applying Zero Trust architecture to secure systems, applications and data
– Proven ability to lead security initiatives and drive alignment with business goals. Experience influencing security policies and strategies at an organizational level
– Established expertise to articulate complex security concepts to diverse audiences, from technical teams to business stakeholders, inspiring trust and alignment across the organization
– Relevant professional certifications such as CISSP, GIAC, and/or AWS/GCP cloud-specific certifications
– Fluent in English, your clear articulation bridges teams worldwide, ensuring collaborative synergy

Meet the team

Joining the Tech team at On, you’ll find yourself at the heart of a fast-paced, diverse environment. Our ecosystem thrives on collaboration — a confluence of curious minds challenging and learning from one another, always seeking the uncharted. Here, we venture into new territories of technology, continuously refining our approach and embracing challenges head-on.