Cyber Security Engineer

Our goal is to have a solar system on every roof, a storage unit in every house, and an electric car in every garage. Enpal makes this possible with an integrated total solution for decentralized energy—from solar systems and battery storage to wall boxes, smart meters, and heat pumps. At the heart of it all is our AI-powered platform Enpal.One +, which intelligently connects thousands of systems and efficiently optimizes electricity procurement and feed-in on the energy market.

Are you ready for solutions that are more than just a promise and bring real quality of life to thousands of households every day? What you create at Enpal will deliver clean electricity tomorrow and bring about lasting change in how we use energy.

We are looking for a Cyber Security Engineer to join our CISO organization. In this role, you are the person who takes ISO 27001, NIS2, and KRITIS requirements off the page and turns them into real work assessing our actual systems, finding where we fall short, collecting evidence, and making sure gaps get closed. Youll work across the full Enpal tech stack: cloud infrastructure, identity, endpoints, applications, and different platforms. Youll sit with engineers in IT and CTO center, review configurations, challenge architectures, and use AI tools to move faster. This is not a governance-from-a-distance role - you get hands-on.

What youll do

building secure solutions. We are serious about delivering incremental value in each iteration, and we celebrate when we improve peoples experience with our solution, make an impact towards our climate goals. Adopting Shift-Left and Zero-Trust approaches in all our units.

translating regulations into tasks. You break down ISO 27001, NIS2/BSIG, and KRITIS into concrete, prioritized actions. You will develop the right solutions or hand over to our CTO and IT teams that will take action.

assessing our tech stack for gaps. You go hands-on across Azure, Entra ID, M365, Intune, Defender XDR, AKS, Terraform, CI/CD pipelines, Datawarehouse and other platforms to find where reality doesnt match the requirement.

Making us resilient and respond to threats. Developing solutions that close the gaps-Respond to cyber security incidents, manage them and create plans to prevent the next occurrence. Developing and automating SIEM and SOAR solutions in collaboration with our SOC helps us in multiple dimensions.

leveraging AI to work smarter. You use AI tooling to automate evidence collection, speed up gap analysis, and generate structured audit documentation and you spot where the rest of the team can benefit too.

driving remediation to closure. You track findings, coordinate with technical owners, escalate whats stuck, and verify that fixes actually hold. Open issues dont sit idle.

being the bridge between compliance and engineering. You make regulatory requirements understandable for technical teams and security requirements understandable for everyone else.

What youll bring

We are looking for roughly a 50% fit with for what we ask. The other 50% is a surprise to us, it is the magic you bring to the table and the diversity in which you make us grow.

you have a security-first mindset, and appreciate developer experience as a close second

you have 5+ years of experience in cyber security or a technical compliance role in a cloud-first environment.

you are technically fluent across Azure, Entra ID, Microsoft 365, Intune, and Defender, and comfortable enough with Kubernetes, IaC, Terraform, CI/CD, and APIs to assess whether a configuration meets a control objective.