Cyber Security Specialist - Privileged Access Management (m/f/d)

WELCOME TO BASF

As part of Cyber Security Engineering - Identity & Access Management (IAM), you will take a key role in strengthening and evolving BASF’s Privileged Access Management (PAM) capabilities.

You will work in a global, complex, and security-critical environment, ensuring secure and compliant privileged access across on-premise and cloud systems, while contributing to BASF’s transition towards Zero Trust and modern identity architectures.

RESPONSIBILITIES

• Implement, operate and support Privileged Access Management (PAM) solutions and related security services
• Administer and maintain key security platforms such as:
  • Privileged Access Management or Endpoint Privilege Management (e.g., CyberArk or equivalent)
  • Secure access components (e.g., SSH Jump Servers, credential vaults)
• Support the end-to-end lifecycle of security platforms, including onboarding of applications and privileged accounts, upgrades, patching and remediation of security vulnerabilities
• Investigate incidents, perform root cause analysis and support problem resolution in complex environments
• Contribute to service improvements through automation, standardization and process optimization
• Collaborate with application owners, infrastructure teams, security functions, software vendors and support partners worldwide
• Support projects and initiatives related to cloud transformation, Zero Trust and modern identity security
• Help translate security requirements into practical and scalable technical solutions
• Contribute to the adoption of security standards, best practices and PAM solutions across the organization
• Participate in agile delivery activities, knowledge sharing and continuous improvement initiatives

QUALIFICATIONS

• Degree in Computer Science, Cyber Security or comparable qualification
• 2 years of experience in:
  • Privileged Access Management (PAM)
  • Cyber Security Engineering or Operations
• Hands-on experience with Windows and Linux environments
• Strong analytical mindset and structured problem-solving approach
• Experience working in global and cross-functional teams
• Fluent English communication in an international environment

NICE TO HAVE

• Experience with PAM solutions such as CyberArk, BeyondTrust or similar platforms
• Experience with identity technologies such as Active Directory, Entra ID and MFA
• Basic scripting or automation skills (e.g., PowerShell, Python)
• Exposure to DevOps practices and CI/CD pipelines
• Familiarity with security standards and frameworks such as ISO 27001, NIST or PCI DSS

WHAT WE OFFER

• A secure work environment because your health, safety and wellbeing is always our top priority.
• Flexible work schedule and Home-office options, so that you can balance your working life and private life.
• Learning and development opportunities
• 25 holiday days per year
• 5 additional days (readjustment)
• A collaborative, trustful and innovative work environment
• Being part of an international team and work in global projects
• Relocation assistance to Madrid provided

At BASF, the chemistry is right

Because we are counting on innovative solutions, sustainable actions, connected thinking and on you, become a part of our formula for success and develop the future with us - in a global team that embraces diversity and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.At BASF, we are committed to upholding and ensuring compliance with company standards related to quality, environment, health, safety, and energy, in line with our global guidelines.We actively promote a culture of prevention and continuous improvement, encouraging collaboration in initiatives related to quality, environmental protection, health, safety, and energy performance.We foster responsible energy use, promoting efficiency in daily operations and supporting the identification of improvement projects and energy-saving opportunities