Job
In this role, you ensure that software components implement 'Security by Design', derive security requirements, conduct risk assessments, and coach interdisciplinary teams on application security best practices.
This listing has been machine translated. Show original
Your role in the team
- You ensure that internal and external software components implement 'Security by Design' — from architecture to go-live in the customer project.
- You derive security requirements from contracts, standards, and customer expectations, and translate them into clear specifications for projects and suppliers.
- You conduct threat and risk assessments for applications and integrations and define concrete, prioritized measures.
- You review software, interface, and integration designs for security and coordinate closely with internal teams and the client's IT department.
- You oversee SSDLC practices in third-party developments and coach internal teams on secure development best practices.
- You coordinate vulnerability management, patch strategies, and exception processes for all integrated software components.
- You plan, oversee, and evaluate security tests and define security acceptance criteria for key project milestones.
- You create customer-oriented security documentation and audit artifacts, and drive security topics forward in workshops and supplier reviews.
Our expectations of you
Education
- Completed degree in Computer Science, Information Security, Electrical Engineering, or a comparable STEM field - or an equivalent qualification.
Qualifications
- In-depth knowledge of Threat Modeling, risk analyses, and common vulnerability classes (e.g., OWASP Top 10, CWE) as well as their countermeasures.
- Ability to systematically prepare complex security topics and communicate them appropriately to the audience - from developers to customer management and suppliers.
- Excellent spoken and written English skills; French is a big plus, German skills are advantageous.
- High willingness to travel (approximately 25% international) and enjoyment of working in interdisciplinary, globally distributed project teams.
Experience
- Several years of experience in designing and evaluating secure software architectures and integrations, ideally in critical infrastructures, production, or a security/software tech environment.
- Application security is your passion; you have practical experience with frameworks such as OWASP SAMM, NIST SSDF (SP 800-218), and IEC 62443-4-1.
- Experience with Secure SDLC/SSDLC processes, CI/CD pipelines, and typical security gates (code reviews, security testing, release approvals).
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Giesecke+Devrient ist ein weltweit tätiges Unternehmen für Sicherheitstechnologien, sowohl in der physischen als auch in der digitalen Welt. Milliarden von Menschen profitieren in ihrem privaten und geschäftlichem Alltag von G+D.
- 1852
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
You’ll be joining at a stage where we’re building and evolving our new CRM platform. That’s exactly what makes this role special: you won’t just develop features—you’ll actively help shape the technical foundation of a modern CRM ecosystem. Together...
The role As a Forward Deployed AI Engineer, you go directly into our specialist departments, understand the processes, and develop production-ready AI and automation solutions that will fundamentally change the way the entire GGW Group operates. You do...
