Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Essen
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop application security strategies, conduct security reviews, and work closely with development teams to effectively implement security standards and guidelines.
Job Technologies
Your role in the team
- At ista, we empower property owners and managers to operate their buildings in a future-proof, energy-efficient, and digital way. To achieve this, we develop and run a wide range of business-critical applications and digital platforms.
- In this role, you will actively drive the advancement of our application security landscape and work closely with international development and platform teams to ensure that security is embedded from the very beginning in applications, products, and architectural decisions.
- Together with our development teams, you will foster a culture where secure software development becomes the norm and security is recognized as a shared success factor.
- Führen Sie die Weiterentwicklung unserer Application Security-Strategie an und verankern Sie Security-by-Design- und Security-by-Default-Prinzipien in internationalen Softwareentwicklungsteams.
- Advise Product Owners, Developers, Architects, and Platform Teams on the secure development and operation of applications.
- Define and establish standards, frameworks, and secure coding guidelines based on industry best practices such as OWASP, Microsoft SDL, NIST SSDF, and ISO 27034.
- Conduct security reviews, threat modeling sessions, and architecture assessments to identify and evaluate application security risks.
- Integrate security requirements and tools such as SAST, DAST, SCA, Secret Scanning, and Container Security into modern development and CI/CD processes.
- Collaborate closely with Development Squads, Platform Engineering, Architecture, and Pentesting Teams to remediate vulnerabilities and implement security requirements sustainably.
- Build and enhance an international Secure Development Community through training programs, Security Champion initiatives, and continuous knowledge sharing.
- Monitor emerging threats, vulnerabilities, and trends in Application Security and assess their relevance for ista.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Strong understanding of modern software development processes and secure development methodologies.
- Knowledge of Threat Modeling, Security Architecture Reviews, and Vulnerability Management.
- Ability to communicate technical risks effectively and provide guidance to a wide range of stakeholders.
- Excellent communication skills with the ability to successfully build, engage, and nurture communities, combined with a pragmatic and solution-oriented mindset; fluent English required, German language skills are an advantage.
Experience
- Several years of experience in Application Security, Secure Software Development, or Software Architecture.
- Hands-on experience with OWASP Top 10, OWASP ASVS, OWASP SAMM, and relevant secure coding standards.
- Experience with cloud technologies, web and API security, as well as modern development platforms and CI/CD processes.
This text has been machine translated. Show original
What we offer
- Do the right thing with purpose and a future: our services save CO2 and protect the environment - we are working for a sustainable world of tomorrow.
- Shape the future of secure software development: Take on a key role in building and advancing Application Security at ista and make a lasting impact on security standards, processes, and our international Secure Development Community.
- Enjoy many benefits: Look forward to an attractive salary, 30 days' vacation per year, and flexible working hours, including the opportunity to work up to 50% of the week remotely.
- Secure good prospects for yourself: We are an internationally successful company with agile working methods and an open corporate culture. Our future course offers you long-term and excellent career options.
- Stay curious and develop yourself further: standing still is not an option for us, which is why we support you in every aspect of your development - a variety of learning opportunities await you.
- Experience a working environment full of trust: We all pull together.
- Have fun in a motivated team: Whether it's a barbecue event, international soccer cup or ice cream for everyone in summer - we always come up with something new, so stay tuned!
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
ista SE
ista SE makes buildings valuable and sustainable for residents and owners. We manage data and processes to make properties climate-friendly, secure, and comfortable. With our products and services, residents and owners can save energy and contribute to climate protection together.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Industry, Production
Manager IT Security - Application Security
- Location
- Essen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
