Job
In this role, you will support product and engineering teams in developing secure software by assessing security risks, creating threat models, and integrating security measures throughout the entire product lifecycle.
This listing has been machine translated. Show original
Your role in the team
- Identify security risks early and effectively incorporate them into product decisions.
- As a Senior Software Security Engineer (m/f/d), you support product and engineering teams in developing secure software and platforms throughout the entire product lifecycle.
- You combine technical security expertise with a pragmatic approach and work closely with development, architecture, and other stakeholders to assess security risks and implement appropriate measures.
- The position is 100% remote and can be performed entirely from anywhere in Germany.
- You support software products and platforms end to end from a security perspective, from architecture and design reviews to code reviews.
- Take responsibility for security-related challenges across multiple product teams, provide technical guidance, and implement solutions yourself when needed.
- Create threat models and security assessments, and track identified risks through to mitigation or a formal risk decision.
- Assess security risks associated with AI- and LLM-based product features and services, and define appropriate guardrails and controls.
- Establishes lean, risk-based security review gates in the development process to ensure security is involved early and in a targeted manner.
- Supports the security integration of newly acquired or newly connected products, as well as their migration to shared platforms.
- Work with engineering teams, architects, and local and global security stakeholders to implement security measures consistently and based on risk.
Our expectations of you
Education
- Have completed a degree in computer science, information security, or a related field, or have an equivalent professional qualification.
Qualifications
- You have a solid understanding of software architectures and Secure SDLC principles.
- Can read and assess source code, repositories, and CI/CD configurations to identify security vulnerabilities.
- Understand specific security risks of AI- and LLM-based applications and the corresponding countermeasures, for example in the context of the OWASP Top 10 for LLM Applications.
- You are familiar with relevant standards and regulatory requirements such as ISO 27001, the Cyber Resilience Act, GDPR, BSI C5, and OWASP, and can derive practical requirements from them.
- Communicate confidently in writing and verbally in German and English with a range of stakeholder groups.
- You are familiar with regulated or compliance-driven environments, such as healthcare or organizations certified to ISO 27001.
Experience
- You have experience with threat modeling methods and security architecture reviews.
- You have several years of professional experience in application security, product security, cloud security, security engineering, or software development with a strong focus on security.
- Have experience with penetration testing or remediating the resulting findings.
- Hold relevant certifications such as AWS Certified Security Specialty, OSCP, CSSLP, or CISSP, and have experience working in international and cross-functional teams.
What we offer
- You decide: Hansefit, EGYM Wellpass, childcare, or JobRad—we offer flexible support with a monthly subsidy of up to €60.
- You’ll also benefit from exclusive discounts through Corporate Benefits.
- You can count on us — TELUS Health supports your mental well-being with personalized offerings.
- We support your development—with LinkedIn Learning, you have access to inspiring learning content and practical training that truly helps you move forward.
- We’re thinking about your future—with our employee stock purchase program, you can share directly in the company’s success, and our company pension plan helps you secure financial stability for the future.
- You are entitled to 30 days of annual leave, giving you plenty of time to relax and pursue your personal interests.
Benefits
Health, fitness & fun
Work-Life-Integration
Topics you will work on
Job locations
About your employer
ResMed is a pioneer in the development of innovative solutions for sleep and respiratory therapy. This allows patients to live healthier lives and avoid hospital stays.
- English
- Established Company
- Onsite, Hybrid, Full Remote
- Industry, Production
Employer reviews
- Working conditions
- 4.0
- Team culture
- 4.0
- Career growth
- 3.3
- Engineering
- 3.0
More jobs
These jobs might also interest you
Hello, let's say WE! We - the HUK-COBURG Insurance Group - are among the top 10 in Germany. Founded over 90 years ago, we are now the leading insurer for private households with over 13 million customers and the largest German auto insurer. Our...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...