Senior Security Engineer - AppSec (d/f/m)
vivenu GmbH3 days ago
Remote, GermanySenior
Responsibilities
- Partner with engineering teams as a trusted advisor to promote security-by-design and improve the security posture.
- Coordinate and execute threat modeling, red teaming, penetration testing, and other security tests across applications and infrastructure.
- Drive risk-based vulnerability triage and remediation using approaches such as EPSS and AI-assisted security testing.
- Design and automate SAST, DAST, secret scanning, and other security guardrails in CI/CD pipelines.
- Perform deep code and configuration reviews and promote secure coding and shift-left practices.
Requirements
- 5+ years of dedicated Security Engineering experience, ideally in a high-growth SaaS, e-commerce, or fintech environment.
- Deep understanding of SaaS business logic, web and API attack vectors, and secure cloud workloads across Kubernetes and AWS, GCP, or Azure.
- Proficiency in at least one programming language for scripting and security tool development.
- Demonstrated ownership of security initiatives from conception through completion.
- Bachelor’s or master’s degree in Computer Science, Cybersecurity, IT, or a related technical field, or equivalent practical experience.
- Preferred qualifications include PCI DSS script security experience, Red/Purple Team and advanced penetration-testing experience, Terraform experience, and familiarity with GCP, Golang, and TypeScript.
Benefits
- Opportunity to build and scale a state-of-the-art AppSec program for a high-growth live entertainment technology company.
- Collaboration with a global team of more than 160 professionals across six offices.
- Inclusive, diverse, and merit-driven workplace with opportunities for learning, growth, and high-impact work.
Tech Stack
Categories
About vivenu GmbH
vivenu GmbH builds an API‑first, white‑label ticketing and access-control platform for enterprise event organizers, venues, and sports teams. Its SaaS covers ticket sales, seat mapping, access management, reporting, and integrations with CRMs, marketing clouds, and analytics via modern APIs. Founded in 2018 and headquartered in Düsseldorf, it operates across Europe and the U.S., serving customers that require control over branding, data, and fan relationships.