Job
- Level
- Senior
- Job Field
- IT, Software, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Munich, Cologne
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop secure software and infrastructure solutions with a focus on Security-by-Design, performing security analyses and code reviews to secure modern applications.
Job Technologies
Your role in the team
- You develop secure software and infrastructure solutions and integrate Security-by-Design principles from the outset into the development and deployment process.
- You support our clients in the design, development, and security of modern applications and infrastructures, for example in the fields of AI, Web, APIs, and Cloud.
- You identify security risks in existing applications, cloud environments, and infrastructure configurations, and derive concrete measures for their remediation.
- You conduct code reviews with a focus on security and establish best practices for secure software development.
- You work closely with development teams, architects, infrastructure teams, and security officers to design comprehensive secure systems.
- You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations.
- You integrate security checks into CI/CD pipelines and assist in building DevSecOps structures.
- You develop and maintain Infrastructure-as-Code solutions to deploy cloud and platform infrastructures securely, transparently, and reproducibly.
- You analyze new technologies and tools in the field of Application Security and actively contribute your ideas to client projects.
- You support our clients in their transformation towards secure software development, modern architectures, and automated infrastructure processes.
- You take responsibility for your own work packages and actively contribute to the further development of our topics and services.
This text has been machine translated. Show original
Our expectations of you
Education
- You have a good to very good degree in Computer Science, Business Informatics, IT Security, or a comparable qualification.
Qualifications
- You have solid knowledge in software development (e.g., Java, Python, Typescript, Go) and a strong interest in considering security from the outset.
- You are familiar with cloud infrastructures, automation, and deployment processes.
- You are familiar with version control (Git) and code reviews.
- You are familiar with common Secure Coding Practices and have a good understanding of typical vulnerabilities (e.g., OWASP Top 10).
- You have knowledge of container technologies (Docker, Kubernetes) and their security.
- Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes (AWS, Azure, GCP).
- Ideally, you have an understanding of modern security architectures (e.g., Zero Trust, Least Privilege, Defense in Depth).
- Ideally, you already have certifications in the field of Security.
- You think not only technically but also analytically and can assess and prioritize security risks in a structured manner.
- You enjoy immersing yourself in new technologies and security topics and continuously developing your knowledge.
- You enjoy working in a team, take responsibility for your topics, and drive them forward independently.
- You communicate confidently in German and English and can convey complex issues clearly, even when interacting with clients.
- You don't just want to implement, but actively shape and achieve real successes in projects and in the development of new topics.
- You have very good German and English skills (at least C1 in both languages).
Experience
- You bring 1-2 years of professional experience for the Engineer role and 2-5 years for the Senior Engineer role.
- You have experience with Clean Code, Design Patterns, and software quality, and you can also apply these principles to automation and infrastructure code.
- You have practical experience with Infrastructure as Code or wish to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi.
- You have experience with automated testing, such as unit, integration, and security tests, and are also familiar with approaches for automated verification of infrastructure configurations.
- You already have experience in a consulting environment or in working with clients.
This text has been machine translated. Show original
What we offer
- Team cohesion is important to us - we support each other and maintain a healthy office culture.
- Our event team organizes regular after-work events and facilitates交流outside of the workplace.
- From day one, you will take on exciting responsibilities with your own accountability – whether on your project or contributing to internal tasks – you will have a say in shaping things!
- With us, you will find an environment that supports, challenges, and advances you.
- We have clearly defined career opportunities and transparent requirements management at every level.
- We give you the freedom and time to develop creative solutions and provide you with the best and most modern hardware for it (Apple or Windows).
- Flexible work models, BahnCard, JobRad, Spendit-Card, Wellpass, and company pension schemes contribute to your well-being.
- Additionally, we have the best coffee from our new espresso machine in the office and a constantly stocked soft drink fridge.
- You enjoy 30 days of vacation per year and have the flexibility to work from home.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
TRUSTEQ GmbH
TRUSTEQ GmbH focuses on IT transformation and digitalization, particularly in the areas of IT strategy, IT consulting, and software development.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Cybersecurity Software Engineer
- Location
- Munich, Cologne
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
