Cybersecurity (Senior) Software Engineer (m/w/d)

Cyber StrategiX; München; Híbrido; EUR 65 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Supportive Team Culture

Early Ownership & Responsibility

Clear Career Development Paths

Creative Work Environment

Employee Benefits

Attractive Vacation Policy

Resumo da oferta

Cyber StrategiX sucht eine/n Security Engineer (m/w/d) mit Fokus auf sichere Softwareentwicklung. Sie gestalten Security-by-Design von Anfang an, prüfen Cloud-Umgebungen, führen sichere Code-Reviews durch und integrieren Sicherheitsmechanismen in CI/CD-Pipelines.

Sie arbeiten eng mit Entwicklern, Architekten und Stakeholdern zusammen. Sie verfügen über Kenntnisse in Java, Python, TypeScript oder Go, sowie Erfahrung mit Docker/Kubernetes und Infrastructure-as-Code.

Qualificações

• Abgeschlossenes Studium der Informatik, BIS, IT-Sicherheit oder vergleichbare Qualifikation.
• 1–2 Jahre Berufserfahrung für die Engineer-Rolle; 2–5 Jahre für Senior Engineer.
• Fundierte Kenntnisse in Java, Python, TypeScript oder Go und Security-by-Design.
• Erfahrung mit Cloud-Infrastrukturen, Automatisierung und Deploy-Prozessen.
• Gutes Verständnis von Clean Code, Design Patterns und Software-Qualität; Automatisierung/Infrastructure Code.
• Erfahrung mit Git und Code-Reviews.
• Kenntnisse gängiger Secure Coding Praktiken und OWASP Top 10.
• Container-Technologien wie Docker und Kubernetes.
• Infrastruktur als Code, z. B. Terraform/OpenTofu/Pulumi.
• Automatisierte Tests (Unit, Integration, Security) und Validierung von Infrastruktur-Konfigurationen.
• Idealerweise DevSecOps-Erfahrung mit AWS/Azure/GCP.

Responsabilidades

• Entwicklung sicherer Software und Infrastruktur unter Security-by-Design.
• Unterstützung von Kunden in Design, Entwicklung und Schutz moderner Anwendungen und Infrastrukturen (z. B. KI, Web, APIs, Cloud).
• Erkennung von Sicherheitsrisiken in Anwendungen, Cloud-Umgebungen und Infrastruktur-Konfigurationen und Ableitung konkreter Gegenmaßnahmen.
• Code-Reviews mit Fokus auf Sicherheit durchführen.
• Enge Zusammenarbeit mit Entwicklung, Architektur, Infrastruktur-Teams und Sicherheits-Stakeholdern.
• Implementierung von Sicherheitsmechanismen wie Authentifizierung, Autorisierung, Verschlüsselung und Secrets-Management.
• Integration von Sicherheitsprüfungen in CI/CD-Pipelines und Unterstützung von DevSecOps-Strukturen.
• Infrastruktur-als-Code-Lösungen sicher, transparent und wiederholbar provisionieren.
• Analyse neuer Technologien im Bereich Anwendungssicherheit und aktive Mitgestaltung von Projekten.
• Unterstützung der Kunden bei der Transformation zu sicherer Softwareentwicklung.
• Eigenverantwortung für eigene Arbeitspakete und Weiterentwicklung der Themen.

Conhecimentos

Sicherheitsorientierte Softwaretechnik

Cloud-Infrastruktur

DevSecOps Kenntnisse

OWASP Top 10

Teamarbeit & Kommunikation

Code-Review-Fähigkeiten

Deutsch & Englisch (C1)

Formação académica

Informatik/BIS/IT-Sicherheit-Studium oder vergleichbare Qualifikation

Ferramentas

Git

Terraform

Kubernetes

Descrição da oferta de emprego

YOUR TASKS

• You develop secure software and infrastructure solutions and integrate security-by-design principles into the development and deployment process from the very beginning.
• You support our clients in the design, development, and protection of modern applications and infrastructures, for example in the areas of AI, web, APIs, and cloud.
• You identify security risks in existing applications, cloud environments, and infrastructure configurations and derive concrete measures to remediate them.
• You conduct code reviews with a focus on security and establish best practices for secure software development.
• You work closely with development teams, architects, infrastructure teams, and security stakeholders to design secure systems holistically.
• You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations.
• You integrate security checks into CI/CD pipelines and support the development of DevSecOps structures.
• You develop and maintain infrastructure-as-code solutions to provision cloud and platform infrastructures securely, transparently, and repeatably.
• You analyze new technologies and tools in the field of application security and actively contribute your ideas to client projects.
• You support our clients in their transformation toward secure software development, modern architectures, and automated infrastructure processes.
• You take ownership of your own work packages and actively contribute to the further development of our topics and services.

YOUR PROFIL

• You have completed a degree with good to very good results in computer science, business information systems, IT security, or a comparable qualification.
• You bring 1–2 years of professional experience for the Engineer role and 2–5 years for the Senior Engineer role.
• You have solid knowledge of software development, for example Java, Python, TypeScript, or Go, and a strong interest in considering security from the very beginning.
• You are familiar with cloud infrastructures, automation, and deployment processes.
• You have experience with clean code, design patterns, and software quality, and can also apply these principles to automation and infrastructure code.
• You are familiar with version control, especially Git, and code reviews.
• You know common secure coding practices and have a good understanding of typical vulnerabilities, such as the OWASP Top 10.
• You have knowledge of container technologies, such as Docker and Kubernetes, and how to secure them.
• You have practical experience with infrastructure as code or would like to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi.
• You have experience with automated testing, for example unit, integration, and security tests, and are also familiar with approaches for the automated validation of infrastructure configurations.
• Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes across AWS, Azure, or GCP.
• Ideally, you understand modern security architectures, such as zero trust, least privilege, and defense in depth.
• Ideally, you already hold certifications in the field of security.
• You think not only technically but also analytically, and can assess and prioritize security risks in a structured way.
• You enjoy familiarizing yourself with new technologies and security topics and continuously developing your knowledge.
• You enjoy working in a team, take responsibility for your topics, and drive them forward independently.
• You communicate confidently in German and English and can explain complex topics clearly, including when interacting with clients.
• You do not just want to implement solutions, but actively help shape them and contribute to real success in projects and in building new topics.
• You already have experience in a consulting environment or in working with clients.
• You have very good German and English language skills (minimum C1 level in both languages)

YOUR BENEFITS

• Supportive Team Culture: Team cohesion is important to us - we support one another and foster a healthy office culture. Our event team organizes regular after-work events to encourage exchange and connection beyond the workplace.
• Early Ownership & Responsibility: From day one, you will take on exciting tasks with real responsibility – whether on your project or by contributing to internal initiatives.You help shape the way we work.
• Clear Career Development Paths: You will find an environment that supports, challenges, and advances your professional growth. We offer clearly defined career paths and a transparent competency framework for every level.
• Creative Work Environment: We give you the freedom and time to develop creative solutions and provide the best, most modern hardware to support you (Apple or Windows).
• Employee Benefits: Flexible working models, a BahnCard, JobRad, Spendit card, Wellpass, and a company pension scheme contribute to your well-being. In addition, you’ll enjoy the best coffee from our new espresso machine and a fully stocked soft drinks fridge in the office.
• Attractive Vacation Policy: You benefit from 30 days of paid vacation per year and the flexibility to work from home.