Senior Security Engineer – AppSec

This is a fully remote position, open to applicants in Germany.

📋 Description

• Collaborate with engineering teams to advocate for security-by-design and enhance the overall security posture.

• Organize and implement threat modeling and advanced security assessments across the product and its underlying infrastructure.

• Lead risk-based vulnerability triage and remediation efforts utilizing EPSS and AI technologies.

• Design, deploy, and automate SAST, DAST, and secret-scanning checks and guardrails within CI/CD pipelines.

• Conduct code and configuration reviews while promoting secure coding practices.

• Establish, scale, and architect an Application Security program from the ground up.

• Influence security culture, processes, and tools throughout the global engineering organization.

• Secure the TypeScript monolith, Go services, web applications, APIs, Kubernetes, GCP, database services, private compute nodes, VPC peering, and Argo CD GitOps deployment architecture.

⛳️ Requirements

• Over 5 years of specialized experience in Security Engineering.

• Preferably, experience in a high-growth SaaS, E-commerce, or Fintech setting.

• Capability to analyze intricate SaaS business logic to identify and validate attack vectors.

• Profound knowledge of web/API attack vectors and scalable security best practices.

• Ability to securely operate workloads in a cloud environment, including Kubernetes and AWS/GCP/Azure.

• Demonstrated history of independently driving security initiatives from inception to completion.

• Proficiency in at least one programming language for scripting and developing security tools.

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical discipline, or equivalent practical experience.

• Familiarity with PCI DSS script security is preferred.

• Background in Red/Purple Team operations and advanced penetration testing is preferred.

• Hands-on experience with Terraform is preferred.

• Knowledge of GCP, Golang, and TypeScript is preferred.

🏝️ Benefits

• A mission-critical position with major global brands in live entertainment technology.

• Ongoing investment in personnel, products, and a long-term vision.

• Collaboration with a global team of over 160 individuals across six offices.

• A diverse, inclusive, and merit-driven workplace.

• Opportunities for daily learning, shared successes, and collective growth.

• Chance to work alongside award-winning technology leaders.

• Opportunity to influence the future of live entertainment technology and the ticketing industry.