We are Covestro. We are curious. We are courageous. We are colorful. We refine chemical material solutions with game-changing products. Let us empower you to push boundaries. Join us and our 18.000 colleagues now and together we will make the world a brighter place.

Covestro's cybersecurity landscape is evolving fast – and you can help shape it. Within our global IT Security team, you'll combine AI and automation to build security solutions that don't just react, but anticipate. You'll embed the "Security by Design" mindset deep into development teams, automate threat responses, and set standards for cloud security on a global scale. This is where real technical depth meets strategic impact – in an environment that doesn't just demand innovation, it thrives on it.

In addition to our wide range of benefits, a full-time position comes with an attractive starting salary between 104,800 €/year and 127,100 €/year plus a variable component. Your starting salary will be determined based on your qualifications and professional experience.

What to expect – your responsibilities in detail:

• Design, implement, and operate agentic security solutions for automated patching, vulnerability remediation, and controlled shutdown processes
• Build and continuously improve external attack surface scanning solutions that combine state-of-the-art AI and LLM capabilities with commercial scanner data and custom scanner logic
• Develop AI-driven review logic for firewall rule analysis, anomaly detection, and cloud policy compliance
• Advise and support software development teams on secure coding practices, threat modeling, and Security by Design principles throughout the entire Software Development Lifecycle (SDLC)
• Co-design and review agentic coding templates in close collaboration with internal and external development partners

Your profile – what sets you apart:

• You hold a degree in computer science, IT security, or a related discipline – or bring equivalent qualifications backed by demonstrated hands-on experience
• Extensive background in software development (particularly Python, automation, and low-level programming) as well as technical IT security (e.g. penetration testing, red teaming, security automation) is part of your track record
• Comprehensive practical experience with AI automation in a security context and with designing security controls for cloud-native and containerized workloads sets you apart
• Strong knowledge of DevSecOps practices and integrating security into CI/CD pipelines is part of your everyday toolkit