Software Security Engineer

Quick Facts

• Role: Software Security Engineer (w/m/d)
• Focus: Secure-by-design and continuous improvement of the Secure Software Development Lifecycle (SSDLC)
• Work options: Multiple locations plus Mobile Office (as stated)

Description

You help continuously shape and improve the Secure Software Development Lifecycle so that software is secure from the start. You create and review secure software development guidelines, support development and product management with complex technical security topics, and evaluate vulnerabilities and security incidents. You plan, accompany, and assess penetration tests and bug bounty programs while sharing expertise across the teams.

Responsibilities

• Develop and improve the SSDLC to ensure secure software “from the ground up”
• Create and review secure software development guidelines internally and within a technology partner program
• Bridge communication between software development and product management
• Plan, run, and evaluate penetration tests and bug bounty programs
• Identify, assess, and help address software vulnerabilities and security incidents
• Share expertise and inspire others (e.g., talks/presentations)

Requirements

• German language skills at C1–C2 level
• Basic knowledge of networking, encryption, operating systems, and cloud architectures (AWS and/or OTC)
• Basic understanding of attacker methods (MITRE) and web vulnerabilities
• Experience with Git and security tools; ability to follow development processes
• Basic programming knowledge
• Ability to promote security awareness and strengthen team communication
• Curiosity and willingness to learn continuously

Benefits

• Flexible working hours
• Company pension provision
• Independent, responsibility-based work