Senior Security Engineer - AppSec (d/f/m)
vivenu GmbH2 months ago
Remote, GermanySenior
Responsibilities
- Partner with engineering teams to promote security-by-design and improve the organization’s security posture.
- Coordinate and execute threat modeling and advanced security testing across products and infrastructure.
- Lead risk-based vulnerability triage and remediation using approaches such as EPSS and AI-assisted security testing.
- Design, implement, and automate SAST, DAST, and secret-scanning checks and guardrails in CI/CD pipelines.
- Conduct deep code and configuration reviews and advocate for secure coding and shift-left practices.
Requirements
- 5+ years of dedicated Security Engineering experience.
- Deep understanding of SaaS business logic, web and API attack vectors, and secure cloud workloads.
- Proven ability to autonomously drive security initiatives from conception to completion.
- Proficiency in at least one programming language for scripting and security tool development.
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field, or equivalent practical experience.
- Preferred experience includes PCI DSS script security, Red/Purple Team operations, advanced penetration testing, Terraform, GCP, Go, and TypeScript.
Benefits
- Opportunity to build and shape a state-of-the-art AppSec program at a rapidly growing live entertainment technology company.
- Work on a mission-critical platform used by global brands and millions of end users.
- Collaborate with a diverse team distributed across six global offices.
- Access to a growth-oriented environment with ongoing learning, shared wins, and collective development.
- Inclusive workplace committed to diverse perspectives and employee growth.
Tech Stack
Categories
About vivenu GmbH
vivenu GmbH builds an API‑first, white‑label ticketing and access-control platform for enterprise event organizers, venues, and sports teams. Its SaaS covers ticket sales, seat mapping, access management, reporting, and integrations with CRMs, marketing clouds, and analytics via modern APIs. Founded in 2018 and headquartered in Düsseldorf, it operates across Europe and the U.S., serving customers that require control over branding, data, and fan relationships.