Job
- Level
- Experienced
- Location
- Herten
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop Security by Design, optimize the Secure Software Development Lifecycle, and conduct threat modeling and security analysis while supporting development teams in secure software development.
Job Technologies
Your role in the team
- You embed and further develop Security by Design in architecture, software development, and operations.
- You define and optimize our Secure Software Development Lifecycle (SSDLC)
- You independently conduct threat modeling and security risk assessments or coordinate their implementation.
- You advise and empower development teams in secure software development as well as on regulatory requirements.
- You assist with security reviews, analyze security vulnerabilities, and fix them.
- You implement security tooling, automated security checks, and vulnerability management processes, and continuously develop them.
- You define security standards and processes and ensure their successful implementation.
- You identify, assess, and escalate security risks
- You strengthen security expertise and promote a sustainable security culture within the company.
- You are building a Security Champion/Security Master network, supporting it, and conducting training sessions and workshops.
This text has been machine translated. Show original
Our expectations of you
Education
- You hold a degree in Computer Science, IT Security, or a comparable qualification.
Qualifications
- You understand regulatory requirements for software products, such as the Cyber Resilience Act (CRA)
- You communicate appropriately to the audience, persuade through moderation skills, and work successfully with different stakeholders and development teams.
- You are characterized by analytical and structured thinking, a high sense of responsibility, and decisiveness, and you enjoy empowering teams and imparting knowledge.
- Ideally, you hold certifications in IT security or software architecture (e.g., CSSLP, CISSP, iSAQB, or GIAC).
Experience
- You have 3-5 years of professional experience in software development, software architecture, or IT security.
- You bring experience in Secure Software Development as well as with modern software architectures, development processes, and DevOps/CI/CD environments.
- You are familiar with common security standards and best practices (e.g., OWASP, Secure Coding) and have experience with security tooling, automated security testing, vulnerability management, and threat modeling.
This text has been machine translated. Show original
What we offer
- High degree of autonomy and short decision-making processes
- Appreciative and open interaction at eye level and a pronounced feedback culture
- Plenty of room for experimentation and your professional and personal development
- Flexible working hours and models that fully contribute to your work-life balance
- Mobile working possible
- Permanent employment contract and at least 30 days of vacation
- Attractive compensation package and numerous great benefits
- Comprehensive structured onboarding for orientation, integration, and networking
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Food & Drink
Health, Fitness & Fun
Higher Take-Home Pay
Topics You Will Work On
Job Locations
About Your Employer
PROSOZ Herten GmbH
Wir sind seit nun mehr als 30 Jahren Marktführer für kommunale IT und entwickeln ganzheitliche, moderne Lösungen für die tägliche Arbeit in der Verwaltung. Hierbei decken wir die Bereiche Arbeit, Soziales, Kinder- und Jugendhilfe sowie Bauen, Ordnung und Umwelt ab.
Description
- Company Size
- 50-249 Employees
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Product Security Engineer
- Location
- Herten
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
