Fresenius Group
Cloud Security Engineer (fixed-term)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Fresenius Group
Fresenius is a global healthcare company based in Bad Homburg, Germany, with a rich history of over 100 years in supporting critically and chronically ill patients. In fiscal year 2024, the company reported €21.5 billion in revenue and employs around 176,000 people. The Fresenius Group consists of three main entities: Fresenius Kabi, Fresenius Helios, and Fresenius Medical Care. Fresenius Kabi specializes in healthcare products for critically and chronically ill patients, focusing on nutrition and infusion therapy. It is a leader in Europe, offering a wide range of products including infusion solutions, parenteral nutrition solutions, and medical disposables. Fresenius Helios operates as Europe's leading private hospital operator, providing healthcare facility services and management. Fresenius Medical Care is recognized as the world's largest dialysis provider, manufacturing dialysis equipment and offering comprehensive dialysis care services through a vast network of clinics. The company is dedicated to improving the lives of patients worldwide through its extensive healthcare solutions.
Security at Fresenius Group
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- The Fresenius Group adopted a cybersecurity strategy to be implemented by 2025, with a focus on advancing cybersecurity as a business enabler.
- Public documentation emphasizes high-level strategy rather than specific operational philosophies.
Security Team
- The Chief Financial Officer (CFO) of the Group Management Board oversees cybersecurity governance.
- The Group Head of Cybersecurity acts as the Group-wide Chief Information Security Officer (CISO).
- Derek Dixon serves as Chief Information Security Officer (CISO).
- The specific team size for the Application Security sub-unit is not disclosed in public reporting.
- There is 1 active AppSec job posting as of.
Key Initiatives
- Vulnerability Management Process: Fresenius encourages vulnerability testing by security researchers and acknowledges receipt of reports within 7 business days.
- The company confirms the existence of vulnerabilities and has established a Vulnerability Disclosure Program (VDP) intended for application security vulnerabilities only.
- Shift Left practices are being implemented with focus on DevSecOps and vulnerability scanning.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.