Software Security Engineer - Senior/Staff (F/m/x)

Job Description

As a Staff Application Security Engineer (f/m/d), you will be responsible for ensuring the security of our applications throughout the software development lifecycle (SDLC). You will work closely with development, product, and DevOps teams to embed security practices, conduct threat modeling, and lead secure code reviews.

Responsibilities

• building secure solutions

• adopting Shift-Left and Zero-Trust approaches

• developing application Security Program: partner with software engineering and product teams to embed security across all stages of the SDLC (design, development, testing, deployment)

• conducting Threat Modeling & Risk Assessment: lead threat modeling sessions, drive secure design and code reviews, and perform application-level risk assessments

• establishing Security Training & Mentorship: serve as hands‑on security advisor to developers by offering training, guidance, and support on secure software development practices and security champions development

• enforcing Secure Coding Standards: define, maintain, and enforce secure coding standards, guidelines, and reusable security patterns across development teams

Qualifications

• minimum 5 years of experience in application security, with a strong understanding of secure coding practices and application security vulnerabilities (OWASP Top 10, ASVS, MSVS)

• hands‑on experience embedding security throughout the entire software development lifecycle — from design and coding to integration and deployment

• hands‑on experience with threat modelling approaches STRIDE, PASTA, DREAD and supporting tools, like TMT, IriusRisk, etc.

• proficiency in multiple programming languages, . Net is a plus

• knowledge of cloud computing platforms; Azure is a plus

• experience with security tooling and automation across domains like SAST, SCA, DAST

• experience identifying and addressing security flaws in APIs and applications, with a solid understanding of OWASP principles

• relevant certifications, CSSLP, OSCP, OSWA are plus

• communicates clearly in English, spoken and written; knowledge of German is a plus

• inspired by the energy transition and want to make a difference

• wants to participate in a company where empowerment and initiative is valued

• agile and lean values are embodied: people over processes, code over documentation, reducing waste by building minimum viable products first, testing it with real users, growing and maintaining solutions as requirements evolve

Additional Information

• Work in Germany's first green unicorn and actively shape the solar energy revolution.

• The sun shines all over the world — at Enpal you will find a highly motivated and diverse team with more than 65 different nationalities.

• Would you rather keep your pet company at home or your colleagues at the office? Even after the pandemic, we offer you a hybrid working model.

• We fulfill every start-up cliché — in our modern office in Berlin-Friedrichshain, you'll find everything your heart desires, from a ping‑pong table and yoga corner to a roof terrace and stocked drinks fridges.

• Your kick‑start at Enpal — Get to know the company, your team colleagues and our founder Mario on your onboarding day.

• Stay up to date — Whether it's company figures at our monthly all‑hands meetings or how a photovoltaic system works at the Lunch & Learn, you'll always know exactly what's going on.

• Energy transition only works together — At Enpal, you can expect a legendary team spirit and unforgettable team events.

• No mistakes, no progress — We live a strong feedback culture and grow with your input, either personally or anonymously via our feedback tool Culture Amp.