Software Security Engineer

Stack

Responsibilities

• ▹Actively further develop the Secure Software Development Lifecycle (SSDLC)
• ▹Create and review secure software development guidelines, both internally and in the Technology Partner Programme of the d.velop platform
• ▹Act as a communicative bridge between development and product management and support teams with technically complex topics
• ▹Plan, accompany and evaluate penetration tests and bug bounty programmes
• ▹Detect and assess vulnerabilities in software and actively accompany security incidents
• ▹Share expertise with talks at the d.velop tech con or PPD all hands

Requirements

• ▹Well organised and keeps the overview even with complex tasks
• ▹Very good German (C1–C2)
• ▹Basic knowledge of networks, encryption, operating systems and cloud architectures (AWS, OTC, …)
• ▹Basic understanding of attacker methods (MITRE) and web vulnerabilities
• ▹Experience with Git and security tools and ability to follow development processes
• ▹Basic programming knowledge is sufficient
• ▹Curiosity and willingness to learn

Soft skills