Senior Security and Compliance Engineer (m/f/d)
Codesphere2 months ago
Munich, GermanySenior
Responsibilities
- Conduct security assessments, penetration testing, vulnerability scanning, and security code reviews while driving remediation with development teams.
- Manage DAST/SAST security scanning tooling and implement security controls across development, infrastructure, and data.
- Integrate security into CI/CD pipelines and development processes using DevSecOps and Shift Left practices.
- Maintain the Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed.
- Ensure compliance with GDPR, ISO 27001, and other relevant standards and regulations.
- Manage IAM systems using a least-privilege approach.
- Deliver company-wide security awareness training and specialized secure coding training for engineering teams.
Requirements
- At least 5 years of experience in security engineering or a similar role, ideally in a cloud or SaaS environment.
- Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling.
- Solid understanding of DevSecOps principles and CI/CD security integration.
- Familiarity with SIEM tools, incident response, and forensic analysis.
- Knowledge of GDPR and ISO 27001; BSI IT-Grundschutz is desirable.
- Strong communication skills for explaining security risks to technical and non-technical audiences.
- Fluent English is required; German is a strong plus.
Benefits
- 32 days of paid time off, including Christmas Eve and New Year's Eve.
- Meal allowance of up to 15 digital vouchers per month.
- Hybrid work setup with mobile work options and flexible core hours.
- Fast-moving environment with significant ownership and learning opportunities.
- Tax-free bicycle leasing through Job-Rad.
- On-site gym access at the Karlsruhe office.
- Employee events, including team offsites and regular get-togethers.
- Company-supported pension scheme.
- Offices with convenient public transport access in Karlsruhe and Munich.
Categories