Product Security Engineer

PROSOZ Herten GmbH

Job

In this role, you will develop Security by Design, optimize the Secure Software Development Lifecycle, and conduct threat modeling and security analysis while supporting development teams in secure software development.

Job summary

This listing has been machine translated. Show original

Job technologies

Your role in the team

  • You embed and further develop Security by Design in architecture, software development, and operations.
  • You define and optimize our Secure Software Development Lifecycle (SSDLC)
  • You independently conduct threat modeling and security risk assessments or coordinate their implementation.
  • You advise and empower development teams in secure software development as well as on regulatory requirements.
  • You assist with security reviews, analyze security vulnerabilities, and fix them.
  • You implement security tooling, automated security checks, and vulnerability management processes, and continuously develop them.
  • You define security standards and processes and ensure their successful implementation.
  • You identify, assess, and escalate security risks
  • You strengthen security expertise and promote a sustainable security culture within the company.
  • You are building a Security Champion/Security Master network, supporting it, and conducting training sessions and workshops.

Our expectations of you

Education

  • You hold a degree in Computer Science, IT Security, or a comparable qualification.

Qualifications

  • You understand regulatory requirements for software products, such as the Cyber Resilience Act (CRA)
  • You communicate appropriately to the audience, persuade through moderation skills, and work successfully with different stakeholders and development teams.
  • You are characterized by analytical and structured thinking, a high sense of responsibility, and decisiveness, and you enjoy empowering teams and imparting knowledge.
  • Ideally, you hold certifications in IT security or software architecture (e.g., CSSLP, CISSP, iSAQB, or GIAC).

Experience

  • You have 3-5 years of professional experience in software development, software architecture, or IT security.
  • You bring experience in Secure Software Development as well as with modern software architectures, development processes, and DevOps/CI/CD environments.
  • You are familiar with common security standards and best practices (e.g., OWASP, Secure Coding) and have experience with security tooling, automated security testing, vulnerability management, and threat modeling.

What we offer

  • High degree of autonomy and short decision-making processes
  • Appreciative and open interaction at eye level and a pronounced feedback culture
  • Plenty of room for experimentation and your professional and personal development
  • Flexible working hours and models that fully contribute to your work-life balance
  • Mobile working possible
  • Permanent employment contract and at least 30 days of vacation
  • Attractive compensation package and numerous great benefits
  • Comprehensive structured onboarding for orientation, integration, and networking

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Herten
    Nordrhein-Westfalen, Germany

About your employer

Wir sind seit nun mehr als 30 Jahren Marktführer für kommunale IT und entwickeln ganzheitliche, moderne Lösungen für die tägliche Arbeit in der Verwaltung. Hierbei decken wir die Bereiche Arbeit, Soziales, Kinder- und Jugendhilfe sowie Bauen, Ordnung und Umwelt ab.

Company size
50-249 Employees
Company type
Established Company
Work model
Onsite, Hybrid, Full Remote
Industry
Internet, IT, Telecommunication
  • sinoDusseldorf

    • Easy Apply
    • Onsite
    • Full Time
    • Senior

    sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...

    • Java
    • PHP
    • C#
    • SQL
    • Linux
    • Windows
  • Die Deutsche RentenversicherungBerlin

    • Hybrid
    • Onsite
    • Part Time/Full Time

    Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...

    • Docker
    • GitLab
    • Jenkins
    • OpenShift
    • Grafana
    • PostgreSQL
    • ArgoCD
    • +2
    • +4
  • Head of IT

    NewTop

    Max-Planck-Institut für Intelligente SystemeStuttgart, Stuttgart

    • Onsite
    • Full Time
    • Lead

    Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...

    • Mac OS
    • Windows
    • Linux

Product Security Engineer

PROSOZ Herten GmbH