Senior Software Security Engineer

This is a fully remote position, open to applicants in Germany.

📋 Description

• Provide security support for software products and platforms throughout the entire product lifecycle, including architecture and design reviews as well as code evaluations.

• Take responsibility for addressing security-related challenges across various product teams and offer technical guidance during the implementation of solutions.

• Develop threat models and conduct security assessments, while monitoring identified risks through mitigation efforts or formal risk decisions.

• Evaluate the security risks associated with AI- and LLM-based product features and services, and establish suitable guardrails and controls.

• Create streamlined, risk-based security review checkpoints within the development process.

• Assist in the security integration of newly acquired or connected products and facilitate their transition to shared platforms.

• Work collaboratively with engineering teams, architects, and both local and global security stakeholders.

⛳️ Requirements

• Strong comprehension of software architectures and Secure SDLC principles.

• Experience with methodologies for threat modeling and conducting security architecture reviews.

• Proficient in reading and evaluating source code, repositories, and CI/CD configurations.

• Familiarity with the security risks linked to AI- and LLM-based applications and the corresponding countermeasures, including the OWASP Top 10 for LLM Applications.

• Knowledge of pertinent standards and regulatory requirements, such as ISO 27001, the Cyber Resilience Act, GDPR, BSI C5, and OWASP.

• Several years of professional experience in application security, product security, cloud security, security engineering, or software development with a strong emphasis on security.

• Degree in computer science, information security, or a related discipline, or an equivalent professional qualification.

• Excellent verbal and written communication skills in both German and English.

• Experience in regulated or compliance-driven environments, penetration testing, and relevant certifications such as AWS Certified Security – Specialty, OSCP, CSSLP, or CISSP is advantageous but not mandatory.

🏝️ Benefits

• Monthly subsidy of up to €60 for Hansefit, EGYM Wellpass, childcare, or JobRad.

• Exclusive discounts available through Corporate Benefits.

• Individual mental health support provided by TELUS Health.

• Access to LinkedIn Learning and practical professional development opportunities.

• Employee stock purchase program.

• Company pension scheme (bAV).

• 30 days of annual leave.