Working Student (f/m/d) - Security Tooling

About IONOS

At IONOS, we don't just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe's leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.

What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises. We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit.

Ready for your next step? Become part of IONOS and grow with us.

Our security tools continuously scan application code and live services, aggregating findings directly into DefectDojo. To keep this pipeline running reliably, we are looking for a committed Working Student (f/m/d) Security Tooling to handle failed scans, clear API bottlenecks, and prevent duplicate findings. The role has a clearly defined operational scope guided by standard runbooks. You will have a dedicated mentor from our Security Engineering team as well as a dedicated test environment where you can experiment safely without risk to production systems.

Tasks

• Operate and monitor our security tooling environment, specifically DefectDojo alongside SAST and DAST scanners.
• Rerun failed automated scans, analyze log files, and identify immediate root causes.
• Maintain and test integrations between tools, including REST APIs, webhooks, data importers, and ticket synchronization.
• Deploy updates and configuration changes, always validating them in the test environment first.
• Keep runbooks, known issues, and tool documentation accurate and up to date.
• Escalate recurring operational issues to the Security Engineer with the necessary diagnostic context.

Qualifications

• You work independently within established runbooks, communicate transparently, and prefer asking questions over guessing.
• Current enrollment in a degree program with an IT focus for the entire duration of employment.
• Basic knowledge of Linux environments and container concepts, with the ability to read and interpret log files.
• Fundamental scripting skills in Python or Bash, as well as experience with Git.
• Basic understanding of REST APIs, JSON, and YAML formats.
• Diligence in following operational runbooks and documenting modifications.
• Clear written communication for handovers and status updates.
• Initial practical exposure to cybersecurity concepts (e.g., through university courses, CTF challenges, or private projects) is advantageous.
• Business Fluency in German (CEFR C1) and English is required.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.

Application Note

We value diversity and welcome all applications – regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.