**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Germany.** This role sits at the core of securing a complex, cloud-native cybersecurity platform used by enterprises and government organizations to detect and respond to real-world adversary activity. You will take full ownership of application and cloud security across a fast-moving engineering environment, directly shaping how security is embedded into products, infrastructure, and delivery pipelines. The position is highly hands-on, focused on building, implementing, and improving security controls rather than advising from the sidelines. You will work closely with engineering, DevOps, and product teams to ensure secure design, resilient architecture, and effective threat detection across AWS and Kubernetes environments. In addition, you will play a key role in compliance programs such as SOC 2 and ISO 27001 while supporting customer trust and audit processes. This is a leadership role with direct responsibility for mentoring a security engineer and acting as a technical escalation point for security incidents. The environment is fast-paced, mission-driven, and highly collaborative. ### Accountabilities You will own and continuously improve the security posture of the platform, with a strong emphasis on application security, cloud security, and secure software delivery. This includes both building security capabilities and embedding them directly into engineering workflows. - Lead application security efforts across the product, including threat modeling, secure design reviews, and hands-on vulnerability remediation with engineering teams - Design, implement, and maintain secure SDLC practices by embedding security into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection - Build and manage security tooling and policy-as-code controls across Terraform/Terragrunt-based infrastructure pipelines - Identify, validate, prioritize, and remediate vulnerabilities across applications, APIs, cloud infrastructure, and third-party integrations - Own cloud security across AWS and Kubernetes, including IAM design, network security, encryption, logging, and configuration drift management - Develop and tune detection and response capabilities using tools such as CloudTrail, GuardDuty, and Security Hub, and lead security incident response activities - Drive SOC 2 and ISO 27001 compliance programs, including control design, audit coordination, and documentation ownership - Support customer trust initiatives by responding to security questionnaires and explaining technical controls during audits and evaluations - Manage and mentor an internal Security Engineer responsible for corporate IT, identity, and endpoint security ## Requirements You are a hands-on security engineer with deep technical expertise in cloud and application security, comfortable operating directly within code, infrastructure, and CI/CD pipelines. You combine strong execution skills with the ability to guide security strategy in a product-driven environment. - 5+ years of experience in security engineering, application security, DevSecOps, or cloud security roles - Strong hands-on experience with AWS and Kubernetes security in production environments - Deep understanding of secure SDLC practices and CI/CD security integration - Ability to read, review, and work directly with application code and APIs for security remediation - Experience implementing SAST, DAST, container scanning, and secrets management tools - Proven experience with SOC 2 and/or ISO 27001 compliance programs, including audit collaboration - Strong knowledge of IAM, network security, encryption, logging, and cloud security posture management - Experience working with incident response, detection engineering, and security monitoring tools - Leadership experience, including mentoring or managing security engineers - Strong communication skills, able to translate technical risk for engineers, leadership, and auditors - Comfortable working in Atlassian tools (Jira, Confluence) and modern SaaS engineering environments - Open and practical mindset toward AI tools and their use in security workflows ## Benefits - Fully remote-friendly role with flexible working arrangements - Competitive compensation aligned with market standards - Wellness programs and employee support initiatives - Strong focus on learning, certifications, and professional development - Inclusive, collaborative, and mission-driven work culture - Opportunity to work on high-impact cybersecurity problems at scale - Employee recognition programs and long-term growth opportunities **How Jobgether works:** We use an **AI-powered matching process** to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! [Why Apply Through Jobgether?](https://jobgether.com/how-jobgether-works) **Data Privacy Notice:** By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1