Назад
Company hidden
2 дня назад

Senior Security Engineer - AppSec (d/f/m) (SaaS)

Формат работы
remote (только Germany)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Germany
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer - AppSec (d/f/m) (SaaS): Building and scaling an application security program for a high-scale ticketing platform with an accent on threat modeling, vulnerability management, and security automation. Focus on securing TypeScript and Go services, hardening Kubernetes and CI/CD environments, and protecting multi-tenant cloud infrastructure.

Location: Remote Germany

Company

hirify.global provides API-first event ticketing technology for global entertainment brands, supporting over 10 million end users and more than 1 billion requests per month.

What you will do

  • Build, scale, and architect an AppSec program across the global engineering organization.
  • Partner with engineering teams to promote security-by-design and shift-left practices.
  • Coordinate threat modeling, offensive testing, and security assessments across applications and infrastructure.
  • Drive risk-based vulnerability triage and remediation using EPSS and AI technologies.
  • Design and automate SAST, DAST, and secret-scanning guardrails in CI/CD pipelines.
  • Review application code and infrastructure configuration and advocate for secure coding practices.

Requirements

  • 5+ years of dedicated Security Engineering experience, ideally in a high-growth SaaS, e-commerce, or fintech environment.
  • Ability to analyze complex SaaS business logic to identify and verify elusive attack vectors.
  • Deep understanding of web and API attack vectors and scalable security practices.
  • Experience running workloads securely in cloud environments, including Kubernetes and AWS, GCP, or Azure.
  • Autonomous ownership of security initiatives from conception through completion.
  • Proficiency in at least one programming language for scripting and security tool development.
  • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field, or equivalent practical experience.

Nice to have

  • Experience with PCI DSS script security.
  • Red Team or Purple Team operations and advanced penetration testing experience.
  • Experience using Terraform to secure infrastructure-as-code and integrate security testing.
  • Familiarity with GCP, Go, and TypeScript.

Culture & Benefits

  • Full-time remote role based in Germany.
  • Work on mission-critical live entertainment technology used by global brands.
  • Join a profitable, VC-backed scale-up with sustainable growth and continuous investment in products and people.
  • Collaborate with more than 160 professionals across six global offices.
  • Inclusive, diverse, merit-driven environment focused on learning and collective growth.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →