Job
In this role, you will develop security architectures, evaluate systemic risks, and implement technical security strategies to ensure compliance with regulatory standards such as DORA and PCI-DSS.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- We are seeking an experienced, high-impact Principal Security Engineer to join our Operational Security (OpSec) function as an individual contributor, leading our technical security strategy and regulatory compliance posture across our e-commerce and financial technology systems.
- In this role, you will bridge deep software engineering and technical system design with regulatory compliance and governance (e.g., DORA, PCI-DSS, ISO 27001), operational resilience, and cross-departmental alignment.
- You will serve as the primary technical authority on complex security architectures, change management guardrails, overall security posture, and risk assessments for critical financial and cloud infrastructure.
- Function as the technical security reviewer and gatekeeper for high-criticality architecture changes.
- Maintain and enforce baseline configuration standards across cloud, server, and endpoint assets and secure Software Development Life Cycle (SDLC) practices.
- Direct technical alignment with regulatory standards including DORA, PCI-DSS, ISO 27001, and local regulatory frameworks.
- Evaluate security posture, CIA requirements, and Service Level Agreements (SLAs) for critical ICT outsourcing services and payment partner integrations.
- Drive system designs and technical strategies across multiple cross-functional teams (engineering teams, product managers, and principal engineers), business units, and corporate entities.
- Foster a security-first culture across departments and bridge the gap between core engineering teams and information security operations.
Our expectations of you
Qualifications
- Deep technical understanding of DORA, PCI DSS, ISO 27001, and ICT risk management frameworks.
- Proven track record in securing cloud-native microservices, web application firewalls (WAF), and supply-chain/CI-CD pipeline security.
- Strong foundation in transport and storage encryption standards, tokenization, PGP/GPG key management, and data classification guidelines.
- Exceptional capability to articulate complex technical security risks to executive leads, auditors, and engineering teams.
Experience
- 8+ years of technical security engineering experience, with demonstrated impact at a Principal / Lead level across multi-team or department-wide scopes.
- Experience in financial services, payment processing, or highly regulated e-commerce environments.
What we offer
- Zalando provides a range of benefits. Here's an overview of what you can expect.
- 27 days of annual leave to start for full-time employees (+1 day for each calendar year, up to 30 days).
- 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners.
- Family support, including counselling and dedicated services for parents and carers.
- Company pension scheme.
- Employee share scheme.
- Health and wellbeing options, including Wellhub.
- Mental health support and coaching.
- Development through our training platform and biannual peer-to-peer review.
- 2 paid volunteering days a year.
- Relocation assistance (subject to prior agreement).
Benefits
Work-Life-Integration
Health, fitness & fun
Food & drink
Topics you will work on
Job locations
About your employer
Zalando is the leading online fashion platform in Europe, connecting customers, brands, and partners in 17 markets. We offer the latest styles and trends from the best fashion brands around the world, all in one place. With Zalando, you can find the perfect outfit for any occasion, whether you're looking for casual wear, formal wear, or something in between. We also offer a wide range of sizes and styles to suit every customer's needs. Shop with us today and see why we're the leading fashion destination in Europe.
- Established Company
- Onsite, Hybrid, Full Remote
- Trade
Employer reviews
- Working conditions
- 4.4
- Team culture
- 3.5
- Engineering
- 3.1
- Career growth
- 2.6
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
