Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
По международному рынку данных пока нет
На СНГ рынке: $4к/мес ($3.7к - $4.3к)
88
Крутая вакансия
развернуть
Чётко очерченная senior-роль в AppSec даёт возможность выстроить программу безопасности, работать с современным облачным стеком и защищать продукт с большой нагрузкой; информации о зарплате нет.
Современный стек
Большая зона влияния
Растущая компания
?Только Германия
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer - AppSec (d/f/m) (SaaS): Building and scaling an application security program for a high-scale ticketing platform with an accent on threat modeling, vulnerability management, and security automation. Focus on securing TypeScript and Go services, hardening Kubernetes and CI/CD environments, and protecting multi-tenant cloud infrastructure.
Location: Remote Germany
Company
hirify.global provides API-first event ticketing technology for global entertainment brands, supporting over 10 million end users and more than 1 billion requests per month.
What you will do
Build, scale, and architect an AppSec program across the global engineering organization.
Partner with engineering teams to promote security-by-design and shift-left practices.
Coordinate threat modeling, offensive testing, and security assessments across applications and infrastructure.
Drive risk-based vulnerability triage and remediation using EPSS and AI technologies.
Design and automate SAST, DAST, and secret-scanning guardrails in CI/CD pipelines.
Review application code and infrastructure configuration and advocate for secure coding practices.
Requirements
5+ years of dedicated Security Engineering experience, ideally in a high-growth SaaS, e-commerce, or fintech environment.
Ability to analyze complex SaaS business logic to identify and verify elusive attack vectors.
Deep understanding of web and API attack vectors and scalable security practices.
Experience running workloads securely in cloud environments, including Kubernetes and AWS, GCP, or Azure.
Autonomous ownership of security initiatives from conception through completion.
Proficiency in at least one programming language for scripting and security tool development.
Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field, or equivalent practical experience.
Nice to have
Experience with PCI DSS script security.
Red Team or Purple Team operations and advanced penetration testing experience.
Experience using Terraform to secure infrastructure-as-code and integrate security testing.
Familiarity with GCP, Go, and TypeScript.
Culture & Benefits
Full-time remote role based in Germany.
Work on mission-critical live entertainment technology used by global brands.
Join a profitable, VC-backed scale-up with sustainable growth and continuous investment in products and people.
Collaborate with more than 160 professionals across six global offices.
Inclusive, diverse, merit-driven environment focused on learning and collective growth.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →