Lead Security Engineer (AI)

Location: Berlin, Germany; hybrid model with three days of on-site work per week. Work from abroad is available for up to 10 days per year, subject to business and team requirements. Relocation support includes visa-process assistance and a relocation package.

Company

hirify.global is Germany’s leading real-estate platform, part of Scout24, building a digital ecosystem for homeowners, property seekers, and agents in Germany and Austria.

What you will do

• Set the technical direction and engineering outcomes for product, cloud infrastructure, and AI security.
• Design and implement reusable security controls, guardrails, and security-as-code patterns across cloud, identity, containers, infrastructure as code, and CI/CD.
• Lead threat modelling and security architecture reviews for high-impact products, platforms, and AI-enabled capabilities.
• Build paved roads and self-service security capabilities that enable secure-by-default software delivery.
• Use metrics and evidence to prioritise security investments, demonstrate control effectiveness, and communicate risks and trade-offs.
• Act as a technical authority and escalation point while mentoring engineers and raising security capabilities across the organisation.

Requirements

• Strong hands-on security engineering and technical leadership experience in a medium-to-large engineering organisation.
• Deep expertise in application or cloud security, with broad knowledge of infrastructure, identity, and data security.
• Experience securing cloud-native environments, ideally AWS, including containerised workloads, infrastructure as code, and CI/CD systems.
• Strong software engineering and automation skills, including production-quality coding or tooling with Python, Terraform, or comparable technologies.
• Practical experience with threat modelling, secure architecture, and integrating security throughout the software development lifecycle.
• Excellent judgement, communication, adaptability, and the ability to influence without formal authority; experience using AI tools with effective human oversight.

Nice to have

• Experience securing AI-enabled products, LLM applications, agents, machine-learning platforms, or supporting data pipelines.
• Experience with Kubernetes and modern application, cloud, or software-supply-chain security tooling.
• Experience protecting sensitive data and implementing controls under GDPR, ISO 27001, or comparable requirements.

Culture & Benefits

• Hands-on senior individual-contributor role with autonomy and no direct line-management responsibility.
• Hybrid work model, 30 days of vacation, and the option to work abroad for up to 10 days per year.
• Dedicated learning time, online courses, regular feedback, book challenges, and individual career paths.
• Relocation package and visa-process support.
• Company pension scheme, public-transport or Job-Bike subsidy, family services, health coaching, and regular health check-ups.
• Barrier-free Berlin office with a gym, cafeteria, rooftop terrace, napping room, and other on-site facilities.