Information Security Engineer (f/m/d) - #2171196

ZEAL Network SE is a dynamic, international group of companies that has been creating exciting and innovative lottery experiences for over 20 years. As Germany’s largest provider of online lotteries through our brands LOTTO24 and Tipp24, and a trusted partner of Spain’s ONCE, the second-largest national lottery, we’re shaping the future of the lottery industry. We are passionate about driving innovation, as demonstrated by our newest brands, Freiheit+ and Traumhausverlosung, which bring fresh and exciting dreams to life. Additionally, through ZEAL Ventures, we invest in inspiring e-commerce start-ups like Omaze and DAYMADE, fueling fresh ideas and opportunities.

Our team of 290+ professionals from diverse backgrounds is united by a visionary mindset, a passion for collaboration, and a commitment to inspire dreams. At ZEAL, we empower our people to think ambitiously and work together toward a shared purpose: helping people imagine and achieve their aspirations.

The Role

Join us as our Information Security Engineer and play a vital role in enhancing both compliance and technical security capabilities. As a key player in our security operations, you will actively engage with security tools, support tech teams, and contribute to a more resilient and secure environment. Your expertise will help shape our security landscape by implementing security solutions, managing risks, ensuring regulatory compliance, and fostering security awareness across the organization. You will be instrumental in protecting our offices, products, and in-house developed software while staying ahead of emerging threats and industry best practices.

Your Tasks

• Design, implement, and maintain security solutions across our infrastructure, with a strong focus on Data Loss Prevention (DLP) and Zero Trust Architecture
• Lead technical security projects and contribute to security engineering efforts (e.g. tool selection, configuration, integration)
• Collaborate with internal stakeholders to drive secure-by-design practices across projects and departments
• Translate compliance and regulatory requirements (ISO 27001:2022, PCI DSS 4.0, TÜV, OWASP, GDPR, etc.) into actionable security controls
• Stay current with security trends, threat intelligence, and emerging attack vectors relevant to our environment
• Maintain a deep understanding of the company’s technical stack and assess risks related to infrastructure, applications, and data
• Own and manage critical components of the security tooling stack based on RASCI model (e.g. CrowdStrike, Zscaler, GRC tools like Alyne)
• Contribute to the security roadmap and ensure alignment with business and regulatory objectives
• Hands-on implementation and configuration of DLP and Zero Trust solutions company-wide
• Support and tuning of existing security tools (e.g., CrowdStrike, Zscaler, Alyne)
• Information security consultancy and technical solution deployment
• ISO 27001:2022 certification support, including ISMS documentation and audit readiness
• Technical expertise in JavaScript, Kotlin, Python, Angular, Go, and SpringBoot.
• Familiarity with cloud-based environments including AWS, Kubernetes, and Docker.
• Support internal and external audit support (ISO, PCI, MGA, WLA)
• Technical risk assessments and mitigation planning
• Support security incident response and post-incident reviews
  
  

What You Offer Us

• Strong knowledge of security standards such as ISO 27001, PCI DSS, GDPR, OWASP, and preferably MGA or WLA regulations.
• Experience with Linux (RPM-based) and AWS environments.
• Hands-on experience with security tools like CrowdStrike, Zscaler, and Tenable.
• Technical expertise in JavaScript, Kotlin, Python, Angular, Go, and SpringBoot.
• Familiarity with cloud-based environments including AWS, Kubernetes, and Docker.
• Strong problem-solving skills and ability to manage risk effectively.
• Excellent communication skills for stakeholder engagement and security awareness training.
• Ability to work independently while collaborating with cross-functional teams.
  
  

What We Offer

• State-of-the-art technologies and an agile environment (Check out our Tech Radar here: https://lotto24.github.io/tech-radar/)
• A modern, dynamic culture grounded in the success of a leading-edge e-commerce company.
• A talented team of ambitious, like-minded colleagues where your knowledge and ideas truly make an impact.
• Ongoing personal growth, supported by our product-focused organization and an annual development budget of €1,500 to invest in your professional development.
• Trust and autonomy, no micromanagement, just confidence in your ability to deliver and excel.
• Flexible work options with a hybrid setup focused on results, offering the freedom to work where and how you’re most productive.
• Generous time off: enjoy unlimited vacation days in addition to your 30-day vacation allowance, with the opportunity for workations abroad using our WorkFlex tool.
• Monthly mobility allowance of €30 to use on the mobility option of your choice (e.g., the Deutschlandticket), plus access to a company bike leasing program.
• Company pension scheme, provided in partnership with Degura, to support your future financial security.
• Subsidized EGYM WELLPASS membership, with a contribution of only €25 per month, giving you access to a wide range of gyms and sports options across Germany.
• Quarterly company events where we gather to celebrate, along with regular team activities and informal gathering, a favorite being our Healthy Tuesday lunches or Pizza Thursdays in the office!
  
  

Not ticking every box or think you’ve got that unique set of skills we haven’t realised we need? Get in touch anyway; we’re always looking to add great people!