Application Security Engineer/Manager (f/m/d)

PSI Software; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

PSI Software AG in Berlin is seeking an experienced Application Security Manager to strengthen our security practices across our software development lifecycle. You will lead secure coding, coordinate security tests, and collaborate with Dev, Ops, and Compliance teams to embed security into our products.

The role requires strong knowledge of web vulnerabilities, cloud platforms and containers, and familiarity with security frameworks; CISSP or similar is a plus.

Qualifikationen

• Strong knowledge of web vulnerabilities (e.g., OWASP Top 10) and secure development practices.
• Experience with cloud platforms & containerization (e.g., Docker).
• Familiar with security frameworks (e.g., NIST, OWASP ASVS).
• CISSP or similar certification is a plus.

Aufgaben

• Clear communication of technical security issues to teams, management, and customers.
• Establishment and management of application security roles in the business units.
• Further development and implementation of a secure SDLC (including standards and guidelines).
• Introduction and operation of SAST/DAST and implementation of threat modeling (e.g., STRIDE, PASTA).
• Ensuring security in CI/CD, vulnerability & patch management (including SBOM).
• Coordinating security tests and working closely with Dev, Ops & Compliance.
• Promoting secure coding and secure architectures.
• Ensuring compliance with open source licenses.

Kenntnisse

OWASP Top 10

Cloud / Docker

Security Frameworks

CISSP

Analytical mindset

Communication skills

Agile environment

Tools

Docker

Jobbeschreibung

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

Are you passionate about Information Security and eager to shape secure software development across a dynamic organization? We’re looking for an experienced and driven Application Security Manager to strengthen our Security practices and empower our business units.

Responsibilities

• Clear communication of technical security issues to teams, management, and customers
• Establishment and management of application security roles in the business units
• Further development and implementation of a secure SDLC (including standards and guidelines)
• Introduction and operation of SAST/DAST and implementation of threat modeling (e.g., STRIDE, PASTA)
• Ensuring security in CI/CD, vulnerability & patch management (including SBOM)
• Coordinating security tests and working closely with Dev, Ops & Compliance
• Promoting secure coding and secure architectures
• Ensuring compliance with open source licenses

Requirements

• Strong knowledge of web vulnerabilities (e.g., OWASP Top 10) and secure development practices
• Experience with cloud platforms & containerization (e.g., Docker)
• Familiar with security frameworks (e.g., NIST, OWASP ASVS)
• CISSP or similar certification is a plus
• Analytical, solution-oriented mindset with the ability to quickly grasp new topics
• High intrinsic motivation, curiosity, and passion for Information Security
• Clear and concise communication skills
• Proactive, collaborative approach and comfortable working in agile environments