Cyber Security Engineer, Wefox
Digital insurance solutions
Job no longer available
Digital insurance solutions
501-1000 employees
Job no longer available
501-1000 employees
Company mission
wefox's mission is to make insurance 10x better for individuals, brokers, partners, and insurers.
Role
Who you are
- Having at least 5+ years of full-time dedicated experience leading Security focused roles on delivering security on distributed architectural solutions in complex environments
- Strong understanding of network security, encryption, and firewall technologies
- Proficiency in conducting penetration testing and vulnerability assessments
- Familiarity with security tools and technologies, including cloud security solutions and XDR platforms
- In-depth knowledge of ISO 27001 standards and certification process
- Experience in developing and implementing information security management systems (ISMS)
- Cloud Security Expertise
- XDR Proficiency: Experience working with Extended Detection and Response (XDR) solutions
- Bachelor’s degree in Computer Science, Engineering or related field; or equivalent combination of education/professional experience in a similar role
- CISSP – Certified Information Systems Security Professional (big plus)
- CCSP – Certified Cloud Security Professional
- AWS – Certified Security Specialty (big plus)
- AWS – Solutions Architect Associate/Professional
- CompTIA Security+
- CompTIA CASP+
- EC-Council Certified Ethical Hacker (CEH)Fluent English, written and spoken. Spanish and German are a plus
What the job involves
- As a Cyber Security Engineer, you will play a pivotal role in ensuring the security and integrity of wefox information systems
- Reporting directly to the Chief Information Security Officer (CISO), you will be responsible for implementing and managing security measures, conducting penetration testing, identifying vulnerabilities, and spearheading efforts to achieve ISO 27001 certification
- Additionally, expertise in cloud security (AWS, GCP, Azure) and experience with Extended Detection and Response (XDR) solutions will be essential components of this role
- Conduct regular penetration tests on the organisation's systems and networks to identify vulnerabilities
- Collaborate with external security experts if necessary to ensure a comprehensive assessment
- Provide detailed reports and recommendations to the CISO for remediation
- Implement and manage a robust vulnerability management program
- Work closely with IT teams to prioritise and remediate identified vulnerabilities
- Stay abreast of the latest security threats and vulnerabilities to proactively address potential risks
- Develop and execute a roadmap for ISO 27001 certification in collaboration with the CISO
- Conduct gap analysis against ISO 27001 requirements and implement necessary controls
- Apply expertise in cloud security, with a focus on AWS, GCP, and Azure
- Ensure compliance with ISO 27001 standards and maintain documentation for certification purposes
- Implement and maintain security controls specific to cloud environments
- Conduct risk assessments and ensure the secure configuration of cloud services
- Utilise XDR solutions to enhance threat detection and response capabilities
- Collaborate with the security operations team to analyse and respond to security incidents
- Optimise XDR tools for improved visibility and incident investigation
- Assist in the development and enforcement of security policies and procedures
- Educate employees on security best practices and ensure adherence to established policies
- Participate in the development and testing of an incident response plan
- Assist in responding to and mitigating security incidents, working closely with relevant stakeholders
- Conduct training sessions and awareness programs for employees on cybersecurity best practices
- Foster a security-conscious culture within the organisation
- Implement and manage security monitoring systems, detect and respond to security incidents in a timely manner
- Participate in the implementation of SOC/SIEM capabilities
- Develop and maintain security monitoring dashboards
- Collaborate with IT teams, system administrators, and other relevant stakeholders to implement security measures
- Work closely with the CISO to align security strategies with organisational goals
Our take
wefox is an insurtech platform where shoppers can compare and purchase insurance products from their phones, and onto which brokers can onboard their clients to help manage operations. The aim is to complement, not render obsolete, the role of the human agents and brokers with whom wefox works.
The company focuses on personal insurance products, such as household insurance, motor insurance and personal liability insurance. It hit Unicorn status in 2019 - becoming the fastest-ever European Fintech to do so - and was valued at over $4.5 billion in 2023.
wefox is continuing to double its revenues and maintain a focus on growth with a clear path towards profitability, whilst strengthening its Board with the appointment of strong senior talent. It is investing heavily in deepening its European presence, expanding to Asian markets, and off the back of debt funding at the end of 2023, is focusing more on its broker operations. Despite layoffs in the same year, it is rapidly developing and releasing new insurance products to continue its disruption of the $5.2 trillion industry.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
9% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Jul 2025
$88.3m
LATE VC
Jul 2024
$26.8m
CONVERTIBLE
Total funding: $1.5bn
Company benefits
- Private Health Insurance
- Discounted fitness memberships
- Up to 50% of your public transport costs reimbursed
- Language lessons (English, German or Spanish)
- Stock Ownership Plan after 2 years
- Free access to a mental health and well-being platform for personalised care, such as 1:1 coaching and therapy sessions
- 26 working days of vacation + 24th and 31st December
- Seniority days: one day of extra holiday per employment year starting from the 2nd anniversary in the company (up to 30 days total holidays)
- A stack of the latest technologies and working gadgets
- Training and Coaching opportunities
- Free coffee, fruit, and snacks because we need fuel!
Company HQ
Tiergarten, Berlin, Germany
Leadership
Fabian Wesemann
(CFO)Previously an associate and analyst at Deutsche Bank, he then co-founded and worked as a mentor at EMPAUA.
Dario Fazlic
(CRO & Member of the Board)Previously founded MOVU AG, and has gone on to invest in the likes of ImmoZins, The Singularity Advisors, and Schlaufux.
Julian Teicke
(CEO)He has a number of co-founder credits to his name, including HeartSpace, doctorly, and Kenjo.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job