Senior Information Security Engineer - Application Security

Das ist der Job

This position is listed on behalf of a partner company, who manages all applications and next steps.

Darum lohnt es sich

The role focuses on embedding security across the entire software development lifecycle, partnering closely with engineering teams to build secure, scalable, and resilient products. You will work on modern technologies, distributed architectures, and CI/CD ecosystems while driving security automation and risk-based decision-making.

As part of a collaborative and experienced security team, you will have the opportunity to influence security strategy, improve developer experience, and directly contribute to customer trust and platform integrity.

Accountabilities Partner with engineering teams throughout the software development lifecycle to integrate security-by-design principles into products and services. Promote pragmatic and developer-friendly security practices while enabling teams to make informed, risk-based decisions.

Strong background in securing SaaS platforms, cloud-native applications, and modern CI/CD ecosystems. Familiarity with Kubernetes, container security, and modern cloud environments is highly desirable. Experience delivering security training, workshops, or awareness initiatives for engineering teams is beneficial.

Benefits Competitive and transparent compensation package aligned with experience, skills, and location. Fully remote and flexible working model with support for home office setups and co-working spaces. Lifestyle benefits program supporting personal wellbeing, family care, learning, and financial wellness initiatives.

Opportunities for in-person collaboration through annual company gatherings, team off-sites, and local community events. Inclusive, international, and highly collaborative culture with significant opportunities for career progression and impact. The final decision and next steps (interviews, assessments) are managed by their internal team.

These tools assist our recruitment team but do not replace human judgment. Our partner is looking for a Senior Information Security Engineer - Application Security based in Germany.

This is an exciting opportunity for a senior security professional to shape and strengthen application security practices within a highly technical, cloud-native environment. This position offers significant autonomy, global collaboration, and the chance to make a visible impact in a rapidly evolving technology landscape.

Lead the implementation, optimization, and integration of application security tools, including SAST, DAST, SCA, and container security solutions within CI/CD pipelines. Drive vulnerability management initiatives by identifying, prioritizing, and coordinating remediation efforts across applications and software supply chains.

Conduct secure architecture reviews, threat modeling exercises, and risk assessments for distributed, API-driven, and microservices-based systems. Support and coordinate application security incidents, collaborating with internal stakeholders to investigate, mitigate, and learn from security events.

Contribute to security audits, customer assurance activities, compliance initiatives, and continuous improvement of security processes. Help enhance the overall security posture of products and engineering processes through automation, guidance, and strategic security initiatives.

Requirements Significant hands-on experience in software engineering and secure coding practices, particularly within Java-based environments. Proven experience conducting secure design reviews, threat modeling, and risk assessments for distributed systems and microservices architectures.

Deep expertise in application security tooling, including SAST, DAST, SCA, dependency management, and container/image scanning technologies. Strong knowledge of vulnerability management processes, including triage, prioritization, remediation coordination, and risk acceptance frameworks.

Experience managing or supporting security incidents and escalations in complex environments. Excellent communication and stakeholder management skills, with the ability to explain complex security concepts to both technical and non-technical audiences.

Collaborative and developer-centric mindset, focused on enabling secure innovation rather than acting as a gatekeeper. Experience with additional technologies such as Python, JavaScript, or TypeScript is considered an advantage.

Previous experience within B2B software organizations, particularly in high-availability or multi-tenant environments, is a plus. Equity participation opportunities through a virtual stock option program, where applicable. Flexible time-off policies designed to promote work-life balance and wellbeing.

Access to global and locally tailored healthcare and wellbeing programs, including mental health support. Retirement, pension, life insurance, and disability coverage where locally applicable. Annual learning and development budget for certifications, courses, books, and professional growth initiatives.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. We appreciate your interest and wish you the best!

Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer.

This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).

You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information.

Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.