application security engineer for banking products

Enfint; Berlin; Vor Ort; EUR 100.000 - 180.000; Vollzeit

Benefits dieser Stelle

Personal development budget

Work from home budget

Wellness discounts

Public transport benefits

Office teamwork day

Zusammenfassung

N26 ищет ведущего специалиста по безопасности ПО для руководства безопасностью продуктов: архитектура, threat modeling, код-ревью и обучение инженерных команд. Уделяется приоритет защите данных, ИИ‑решений и облачной инфраструктуры.

Кандидат должен уметь проводить обзоры дизайна, тестирования безопасности и ответственное реагирование на инциденты. Работа предполагает гибридный формат, удаленную часть и переработку процессов безопасности.

Qualifikationen

• Экспертиза в разработке безопасных программных продуктов, владение языками Python или Go.
• Опыт моделирования угроз, тестирования безопасности и анализа приложений.
• Опыт автоматизации Secure SDLC; умение вести SDLC с акцентом на безопасность.

Aufgaben

• Руководить инженерами по безопасности, наставлять команды разработки и специалистов безопасности; прогнозировать угрозы и снижать риски.
• Проводить проектирование безопасной архитектуры и обзоры кода на протяжении жизненного цикла разработки.
• Проводить пентесты внутренних и внешних приложений, включая функции на базе ИИ; развивать инструменты для SDLC.

Kenntnisse

Threat modeling

Security testing

Automation

Secure SDLC

Cloud security

Microservices

Code reviews

Leadership

Ausbildung

Высшее образование в ИТ

Tools

Python

Go

OWASP Top 10

Jobbeschreibung

Описание

N26 has reimagined banking for today’s digital world. It provides a global digital banking platform without physical branches, paperwork, or hidden fees, offering customers an elegant digital experience and flexible banking.

Задачи

Apply advanced security architecture knowledge to guide software engineers in building secure products and services across microservices, mobile applications, and AI-driven solutions; Serve as a technical leader and mentor for engineering teams, addressing complex application security needs; Perform application security design reviews, threat modeling, and code reviews throughout the development lifecycle; Conduct penetration testing of internal and external applications and services, including AI-powered features; Develop advanced tooling for the Secure Software Development Lifecycle and other security initiatives; Build automation frameworks that help engineering teams deliver secure features efficiently; Mentor and educate engineering teams and security champions on secure coding and development practices; Empower engineering teams to identify and remediate vulnerabilities before production; Lead reactive incident response during security events; Research new attack vectors targeting AI technologies, data pipelines, and LLM-based systems; Drive the enhancement of the Product Security Program and provide strategic guidance to engineering teams.

Требования

Expertise in software engineering with one or more general-purpose programming languages such as Python or Go; Extensive experience with threat modeling, security testing, and application analysis; Experience building automation for the Secure Software Development Lifecycle; Proven ability to lead and mentor engineering teams throughout the Software Development Lifecycle; Strong interest in information security and evolving threats targeting AI systems; Deep technical knowledge of cloud and networking security, web application security, mobile security, AI-driven product security, and data governance; Strong understanding of microservice architectures and scalable cloud software; Ability to identify software flaws, communicate solutions, and implement practical fixes; Expertise in static and dynamic code analysis, fuzzing, and other vulnerability identification techniques; Solid knowledge of secure coding practices and security standards, including the OWASP Top 10; Ability to balance security risks with product innovation and advancement.

Условия

Competitive personal development budget; Work from home budget; Discounts for fitness and wellness memberships; Language app and public transportation benefits; One dedicated office teamwork day per week plus another office day of choice, with remote work the rest of the time; Premium subscription for the employee’s personal N26 bank account and subscriptions for friends and family members; One additional annual leave day for each year of service; High degree of autonomy and access to cutting-edge technologies; Relocation package with visa support.