Essential requirements

Proficient understanding of secure software development practices, including threat modelling and security architecture review for products.
Hands-on experience assessing security and privacy risks in product features (e.g., authentication, encryption, data handling, APIs).
Working knowledge of cloud security fundamentals (e.g., AWS) and common infrastructure tools (Kubernetes, Terraform, Helm).
Experience supporting security certifications/compliance frameworks (e.g., ISO 27001, GDPR).
Strong communication skills and experience engaging both technical and non-technical stakeholders on security and privacy topics.

Strong plus

Ideally, you have relevant security and/or DevOps certifications, such as CKS, etc.
You are familiar with GitHub, Jira and Confluence.

Further qualifications and skills

You are a good communicator and you like to work in a team.
You are interested in and keep up with trends and news from the InfoSec world.
You are self-motivated to identify security problems and engage with teams to find solutions.
You like to do in-depth research on your own and present the results to the team.
You have programming experience, preferably with one or more of JavaScript, TypeScript, Swift, Kotlin, Java, Rust and Haskell.
You have a thorough understanding of security code reviews, bug triage based on common metrics like CVSS, and vulnerability management.
You have a practical, working understanding of basic cryptographic ciphers/algorithms and understand protocols or concepts like Elliptic Curve, TLS, Public Key Infrastructure and Messaging Layer Security.
You have a strong understanding of application security frameworks like OWASP Top 10.
You bring thorough knowledge of OAuth, SSO, Identity and Access Management systems.
You are willing to subject yourself to the S2 security check of the German Government.

This role can be performed remotely from Germany or another EU country. Regular travel to our Berlin office for workshops, and selected in-person collaboration sessions is expected.

Senior Security Engineer (f/m/d)

Wir freuen uns auf Dich!

Dokumente