{"id":1595083,"url":"https://alion.io/job/ionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd","title":"Cyber Security Engineer (f/m/d) Infrastructure & AI Platform Security","company":{"id":51740,"name":"IONOS","domain":"ionos.com","url":"https://alion.io/company/ionos","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":64000,"max_usd":141000,"period":"year","method":"role_country_seniority_unknown","sample_n":54},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Function Calling","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-01T08:58:49Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T14:11:16Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"About IONOS\nAt IONOS, we don't just manage servers - we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe's leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure - from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.\nWhat drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises. We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit.\nReady for your next step? Become part of IONOS and grow with us.\nBoth halves of this role are about the same underlying question: which systems can reach our most sensitive infrastructure, and under what controls. You will own the security architecture for our provider-side infrastructure layer, and you will be the subject matter expert for the AI platforms and agents we operate internally, making sure they run in a secure, governed, auditable state rather than accumulating quietly as a new class of privileged access.\nThis is a hands-on expert role. You set standards, pressure-test designs, and work directly with platform and engineering teams across our brands to get them implemented.\nTasks\nDefine and maintain security architecture standards and hardening baselines for provider-side infrastructure: virtualization and container platforms, control planes and provisioning systems, DNS, mail infrastructure, and backup and recovery systems.\nAssess and strengthen tenant isolation across shared hosting, virtualization, and container layers, and drive remediation with the responsible platform teams.\nReview infrastructure designs and major changes for security impact, and act as an escalation point for infrastructure security questions from platform, cloud, and brand engineering teams.\nReduce blast radius on the paths that matter most: privileged access to customer-facing infrastructure, administrative segmentation, secrets handling, and recovery integrity - translated into workable per-brand implementation plans across our heterogeneous platforms.\nSupport Cyber Defense, Vulnerability Management, and IT Emergency Management with infrastructure expertise during incidents and post-incident hardening.\nOwn the security architecture and baseline standards for the AI platforms we run internally: model gateways and self-hosted models, agent frameworks, assistant integrations, connectors, and retrieval pipelines over internal data.\nDefine and enforce how agents are identified, authenticated, and authorized: non-human identity handling, credential and token management, least-privilege tool and system access, and where autonomous action requires a human in the loop.\nEstablish what data internal AI systems may access and index, and ensure agent activity is logged, attributable, and reviewable to the standard our regulatory and certification obligations require.\nRun pre-deployment security reviews for new internal AI platforms and agent use cases, at a pace that fits how fast these are being adopted, and keep a picture of where unsanctioned AI usage is emerging.\nAdvise the security functions and internal engineering teams on adopting AI safely, including the guardrails that make that adoption defensible.\nQualifications\nSeveral years of hands-on experience in infrastructure or platform security, ideally at a hosting provider, cloud provider, telco, or comparably large-scale multi-tenant environment.\nDeep practical knowledge of Linux, virtualization and container platforms, networking, and the security properties of multi-tenant infrastructure.\nStrong background in identity and access: privileged access, machine and workload identity, secrets management, authorization models, and infrastructure-as-code security.\nExperience designing and enforcing security standards in a heterogeneous, partly legacy landscape, and getting them adopted by teams you do not manage.\nWorking knowledge of how LLM and agent systems are built and operated, and of the risks specific to them: prompt injection through untrusted data, over-scoped tool access, data exposure via retrieval, unlogged autonomous action, model and provider dependency.\nAbility to make and defend risk-based decisions, including blocking a deployment with a clear rationale, and to explain technical risk to non-technical stakeholders.\nFluent English; German is a strong advantage given our regulatory and public-sector environment.\nNice to have\nHands-on experience deploying or securing internal AI platforms, agent frameworks, or tool-calling integrations in production.\nFamiliarity with NIS2 / BSIG or ISO 27001\nBackground in DNS, e-mail infrastructure, or abuse-adjacent platform security.\nExperience in a multi-brand or post-acquisition environment where the same control has to land in several different implementations.\nSecurity engineering or development background (automation, tooling, scripting).\nBenefits\nHybrid working model.\nFlexible working hours through trust-based working hours.\nAt some locations a subsidized canteen and various free drinks.\nModern office space with very good transport connections.\nVarious employee discounts for activities and products.\nEmployee events such as summer and winter parties, as well as workshops.\nNumerous training and development opportunities.\nVarious health offers, such as sports and health courses.\nApplication Note\nWe value diversity and welcome all applications - regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.","description_format":"text","description_chars":5816,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Domain Registrars & Registries","Cloud Platforms (IaaS & PaaS)","Web Hosting & VPS"],"lifecycle":[{"event":"open","at":"2026-10-01T17:30:51Z"}],"visa":[],"liveness":{"score":67,"band":"ok","label":"Likely open","p_open":1,"p_active":0.739,"p_room":0.9,"age_days":19,"expected_fill_days":34,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd","json_url":"https://alion.io/job/ionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd.json","meta":{"generated_at":"2026-10-21T15:07:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21555,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51740},"rest":"https://alion.io/mcp/rest/get_company?id=51740"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fionos-cyber-security-engineer-infrastructure-ai-platform-security-fmd"}]}