Cybersecurity (Senior) Software Engineer (m/f/d)

Personio; München; Remote; EUR 65.000 - 90.000; Vollzeit

Benefits dieser Stelle

Teamkultur

Eigenverantwortung

Karrierepfade

Kreatives Arbeitsumfeld

Mitarbeiter-Benefits

30 Tage Urlaub

Zusammenfassung

Personio sucht Sie zur Verstärkung im Bereich Security-Engineering. Sie entwickeln sichere Software- und Infrastruktur-Lösungen, integrieren Security-by-Design in Entwicklung und Deployment und arbeiten eng mit Kunden an modernen Architekturen und automatisierten Infrastrukturen zusammen.

Sie bringen 1–5 Jahre Erfahrung, Kenntnisse in Java/Python/TypeScript/Go und Cloud-Umgebungen mit. Teamarbeit, Deutsch- und Englisch-Kommunikation, sowie DevSecOps-Erfahrung sind von Vorteil.

Qualifikationen

• Sie haben ein abgeschlossenes Studium in Informatik, Wirtschaftsinformatik, IT-Sicherheit oder eine vergleichbare Qualifikation.
• Sie verfügen über 1–2 Jahre Berufserfahrung für die Engineer-Position bzw. 2–5 Jahre für die Senior-Position.
• Sie beherrschen Software-Entwicklung (Java, Python, TypeScript oder Go) und Security von Beginn an.
• Sie kennen Cloud-Infrastrukturen, Automatisierung und Deployment-Prozesse.
• Sie wenden Clean Code, Design Patterns und Software-Qualität auch auf Automatisierung und Infrastrukturcode an.
• Sie arbeiten sicher mit Git und Code-Reviews.
• Sie kennen sichere Codierungspraktiken und OWASP Top 10.
• Sie haben Erfahrung mit Docker, Kubernetes und sichern diese.
• Sie verfügen idealerweise über Terraform, OpenTofu oder Pulumi.
• Sie bringen Erfahrung mit automatisierten Tests und DevSecOps in AWS/Azure/GCP mit.
• Sie verstehen moderne Sicherheitsarchitekturen (Zero Trust, Least Privilege, Defense in Depth).
• Sie idealerweise Zertifizierungen im Sicherheitsbereich.
• Sie denken analytisch, priorisieren Risiken strukturiert.
• Sie arbeiten gerne im Team, übernehmen Verantwortung und treiben Themen voran.
• Sie kommunizieren sicher auf Deutsch und Englisch mit Kunden.
• Sie möchten aktiv zur Gestaltung von Lösungen beitragen.

Aufgaben

• Sie entwickeln sichere Software- und Infrastruktur-Lösungen und integrieren Sicherheits-by-Design in Entwicklung und Deployment.
• Sie unterstützen unsere Kunden bei Design, Entwicklung und Schutz moderner Anwendungen und Infrastrukturen.
• Sie identifizieren Sicherheitsrisiken in bestehenden Anwendungen, Cloud-Umgebungen und Infrastruktur-Konfigurationen und leiten Maßnahmen ab.
• Sie führen Code-Reviews mit Fokus auf Sicherheit durch und etablieren Best Practices.
• Sie arbeiten eng mit Development-, Architektur-, Infrastruktur- und Security-Teams zusammen, um sichere Systeme ganzheitlich zu entwerfen.
• Sie implementieren Sicherheitsmechanismen wie Authentifizierung, Autorisierung, Verschlüsselung und Secrets-Management.
• Sie integrieren Sicherheitschecks in CI/CD-Pipelines und unterstützen DevSecOps-Strukturen.
• Sie entwickeln und pflegen Infrastructure-as-Code-Lösungen zur sicheren Bereitstellung von Cloud-/Plattform-Infrastrukturen.
• Sie analysieren neue Technologien und Tools im Bereich Anwendungssicherheit und bringen Ideen ein.
• Sie unterstützen Kunden bei der Transformation hin zu sicherer Softwareentwicklung und modernen Architekturen.
• Sie übernehmen Ownership und treiben Themen proaktiv voran.

Kenntnisse

Java

Python

TypeScript

Go

Deutsch und Englisch

Secure Coding Practices

OWASP Top 10

DevSecOps

Teamwork

Git & Code Reviews

Ausbildung

CS/IT-Sicherheit Abschluss

Tools

Docker

Kubernetes

Terraform

OpenTofu

Pulumi

Git

Jobbeschreibung

YOUR TASKS

• You develop secure software and infrastructure solutions and integrate security-by-design principles into the development and deployment process from the very beginning.
• You support our clients in the design, development, and protection of modern applications and infrastructures, for example in the areas of AI, web, APIs, and cloud.
• You identify security risks in existing applications, cloud environments, and infrastructure configurations and derive concrete measures to remediate them.
• You conduct code reviews with a focus on security and establish best practices for secure software development.
• You work closely with development teams, architects, infrastructure teams, and security stakeholders to design secure systems holistically.
• You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations.
• You integrate security checks into CI/CD pipelines and support the development of DevSecOps structures.
• You develop and maintain infrastructure-as-code solutions to provision cloud and platform infrastructures securely, transparently, and repeatably.
• You analyze new technologies and tools in the field of application security and actively contribute your ideas to client projects.
• You support our clients in their transformation toward secure software development, modern architectures, and automated infrastructure processes.
• You take ownership of your own work packages and actively contribute to the further development of our topics and services.

YOUR PROFIL

• You have completed a degree with good to very good results in computer science, business information systems, IT security, or a comparable qualification.
• You bring 1–2 years of professional experience for the Engineer role and 2–5 years for the Senior Engineer role.
• You have solid knowledge of software development, for example Java, Python, TypeScript, or Go, and a strong interest in considering security from the very beginning.
• You are familiar with cloud infrastructures, automation, and deployment processes.
• You have experience with clean code, design patterns, and software quality, and can also apply these principles to automation and infrastructure code.
• You are familiar with version control, especially Git, and code reviews.
• You know common secure coding practices and have a good understanding of typical vulnerabilities, such as the OWASP Top 10.
• You have knowledge of container technologies, such as Docker and Kubernetes, and how to secure them.
• You have practical experience with infrastructure as code or would like to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi.
• You have experience with automated testing, for example unit, integration, and security tests, and are also familiar with approaches for the automated validation of infrastructure configurations.
• Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes across AWS, Azure, or GCP.
• Ideally, you understand modern security architectures, such as zero trust, least privilege, and defense in depth.
• Ideally, you already hold certifications in the field of security.
• You think not only technically but also analytically, and can assess and prioritize security risks in a structured way.
• You enjoy familiarizing yourself with new technologies and security topics and continuously developing your knowledge.
• You enjoy working in a team, take responsibility for your topics, and drive them forward independently.
• You communicate confidently in German and English and can explain complex topics clearly, including when interacting with clients.
• You do not just want to implement solutions, but actively help shape them and contribute to real success in projects and in building new topics.
• You already have experience in a consulting environment or in working with clients.
• You have very good German and English language skills (minimum C1 level in both languages)

YOUR BENEFITS

• Supportive Team Culture: Team cohesion is important to us - we support one another and foster a healthy office culture. Our event team organizes regular after-work events to encourage exchange and connection beyond the workplace.
• Early Ownership & Responsibility: From day one, you will take on exciting tasks with real responsibility – whether on your project or by contributing to internal initiatives.You help shape the way we work.
• Clear Career Development Paths: You will find an environment that supports, challenges, and advances your professional growth. We offer clearly defined career paths and a transparent competency framework for every level.
• Creative Work Environment: We give you the freedom and time to develop creative solutions and provide the best, most modern hardware to support you (Apple or Windows).
• Employee Benefits: Flexible working models, a BahnCard, JobRad, Spendit card, Wellpass, and a company pension scheme contribute to your well-being. In addition, you’ll enjoy the best coffee from our new espresso machine and a fully stocked soft drinks fridge in the office.
• Attractive Vacation Policy: You benefit from 30 days of paid vacation per year and the flexibility to work from home.