Open position
IT Security Engineer (m/f/d) – Threat Modeling & Agentic AI Security
Hybrid: mostly remote within Germany, occasionally at our Bonn office.
You find attack paths before attackers do – across software, cloud, OT and AI architectures, supported by VamiThreat.
Your responsibilities
- Run threat modeling workshops for software, cloud, OT and AI architectures (STRIDE, MAESTRO, MITRE ATT&CK and ATLAS)
- Analyse agentic AI systems: prompt injection, tool and MCP abuse, data exfiltration, autonomy and permission risks
- Derive prioritised action plans and security requirements, aligned with the OWASP LLM Top 10 and the EU AI Act
- Contribute to threat libraries and analysis models in VamiThreat
- Share knowledge in workshops, webinars and articles
Your profile
- Several years of experience in security architecture, threat modeling or penetration testing
- In-depth knowledge of established threat modeling methods and current attack techniques against cloud and AI systems
- Hands-on experience with LLM applications, RAG or agent frameworks (e.g. MCP or LangGraph)
- Excellent German (at least C1) and good English
- A plus: experience with IEC 62443, ISO/SAE 21434 or medical device security
Threat ModelingSTRIDEMAESTROMITRE ATT&CKMITRE ATLASOWASP LLM Top 10Agentic AI Security
What We Offer
Why VamiSec?
Remote-First
Flexible work from anywhere in Germany – we trust in results.
Professional Development
Certifications, training, and conferences – we invest in your growth.
Responsibility
Autonomous work on exciting projects for renowned clients.
Team
Small, highly motivated team with flat hierarchies and direct communication.
Fair Compensation
Competitive salaries, bonuses, and benefits – transparent and performance-based.
Impact
Your work makes organizations and critical infrastructure more secure.