Tasks
We are looking for a motivated working student (f/m/d) to join the GEA Digital security team and help shape the security posture of our digital platforms across the DigiHub. You will work hands-on with our security platform (Aikido), modern DevOps tooling, and cutting-edge topics like Agentic AI and AI-powered penetration testing — while collaborating with DevOps, InfoSec, ITSec and application owners across divisions.
Security Research, Planning & Implementation: Drive software (application and infrastructure) security research and implementation using Aikido, the security platform for GEA Digital, including analysis of InfoSec security reports.
Stakeholder Coordination: Support coordination with the DevOps team, solution/application owners, InfoSec, ITSec and the CAF team to deliver the DigiHub / cross-divisional security strategy framework.
Security Posture Ownership: Co-own the security posture for the Aikido organizations (Eureka, IIoT, DigiHub).
Daily Security Operations: Perform daily checks on security dashboards, PR gates, and SLA management for issues in your responsible workspaces.
Tooling Development: Develop and test security tools, applications and scripts to enable security assessments for responsible teams and applications.
Project Support:
•Support the adoption of the DigiHub-wide Security Strategy Framework
•Contribute to the AI-Pentest Development Tool initiative
•SIEM Integration for SoC Team
Your Learning Curve:
•Agentic AI secure development
•Red teaming and offensive security
•Designing secure systems architecture
•Hands-on Azure cloud security experience with microservices and scalable infrastructure (AKS)
Requirements
Enrollment: Actively enrolled as a degree-seeking student at a state-recognized university in Germany (proof of enrollment required).
Field of Study: MS in Computer Science / Engineering — a major in Computer Networking and Security or a related field is preferable.
•Solid knowledge of core CS areas: Data Structures & Algorithms, Computer Networks, Operating Systems, DBMS and Computer Security
•Strong understanding of OOP concepts, system design and distributed systems
•Knowledge of at least one public cloud platform (Azure preferred)
•Working proficiency (reading, understanding, writing) in at least one modern programming language
Good to have: understanding of IIoT security standards (IEC 62443) and GDPR compliance.
Plus: experience with the DevOps/SRE toolchain (Argo CD, Loki, GitHub Actions, Grafana, Prometheus, etc.).
Plus: foundational understanding of Agentic and Generative AI.
Languages: Strong English speaking and writing skills (C1 minimum, required); German is a plus.
Conditions
•Real ownership of security topics in a production* cloud environment
•Mentorship in offensive security, secure architecture and AI-driven security tooling
•Flexible working hours compatible with your studies
•Exposure to cross-divisional security strategy in a global industrial company
