“Security Engineer” is a typical name for a role/position in US companies and is also finding it’s place in European companies, including Germany. As always, a role like this has various interpretetations and as such are very often not comparable. For some a Security Engineer is just a pen tester, for others it seems to be an information security officer (ISO) in addition there are approaches from consultants to developers. This project is aimed at creating a description of how