Cybersecurity (Senior) Software Engineer (m/w/d)

Cyber StrategiX; München; Hybrid; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Team culture

Ownership from day one

Career development paths

Creative work environment

Employee benefits

Generous vacation policy

Zusammenfassung

Cyber StrategiX is seeking an Engineer/Senior Engineer to design and implement secure software and cloud infrastructure. You will embed security-by-design from the ground up and collaborate with clients to protect modern apps and APIs.

You will perform security-focused code reviews, implement authentication and encryption, and drive secure CI/CD practices. Ideal candidates have 1–5 years of relevant experience, hands-on dev skills in Java/Python/TypeScript/Go, and strong German and English

Qualifikationen

• Degree in computer science, IT security or related field (good to very good results).
• 1-2 years for Engineer, 2-5 years for Senior Engineer.
• Solid knowledge of software development (Java, Python, TypeScript, Go).
• Familiar with cloud infrastructures, automation, deployment processes.
• Experience with clean code, design patterns and software quality.
• Familiar with Git and code reviews.
• Knowledge of OWASP Top 10 and secure coding practices.
• Container technologies like Docker and Kubernetes; securing them.
• Experience with infrastructure as code tools (Terraform OpenTofu Pulumi).
• Experience with automated testing (unit/integration/security).
• Exposure to DevSecOps and AWS/Azure/GCP security practices.
• Understanding modern security architectures (zero trust, least privilege).
• Certifications in security are a plus.
• Analytical thinking and risk prioritization.
• Willingness to learn new security topics and technologies.
• Team player with client-facing experience.
• Strong German and English skills (C1 level).

Aufgaben

• Develop secure software and infrastructure solutions from the start.
• Support clients in designing, developing and protecting modern apps and cloud infra.
• Identify security risks in apps, cloud environments, and configurations.
• Conduct security-focused code reviews and establish secure development practices.
• Collaborate with dev, architecture, and security stakeholders to design secure systems.
• Implement authentication, authorization, encryption, and secrets management.
• Integrate security checks into CI/CD and DevSecOps processes.
• Develop and maintain infrastructure-as-code for secure cloud platforms.
• Monitor new security technologies and contribute ideas to projects.
• Assist clients in transforming to secure development and modern architectures.
• Own work packages and contribute to service development.

Kenntnisse

Java

Python

TypeScript

Go

Security by design

German language

English language

Ausbildung

Degree in Computer Science/IT Security

Tools

Docker

Kubernetes

Terraform

OpenTofu

Pulumi

Jobbeschreibung

YOUR TASKS

• You develop secure software and infrastructure solutions and integrate security-by-design principles into the development and deployment process from the very beginning.
• You support our clients in the design, development, and protection of modern applications and infrastructures, for example in the areas of AI, web, APIs, and cloud.
• You identify security risks in existing applications, cloud environments, and infrastructure configurations and derive concrete measures to remediate them.
• You conduct code reviews with a focus on security and establish best practices for secure software development.
• You work closely with development teams, architects, infrastructure teams, and security stakeholders to design secure systems holistically.
• You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations.
• You integrate security checks into CI/CD pipelines and support the development of DevSecOps structures.
• You develop and maintain infrastructure-as-code solutions to provision cloud and platform infrastructures securely, transparently, and repeatably.
• You analyze new technologies and tools in the field of application security and actively contribute your ideas to client projects.
• You support our clients in their transformation toward secure software development, modern architectures, and automated infrastructure processes.
• You take ownership of your own work packages and actively contribute to the further development of our topics and services.

YOUR PROFIL

• You have completed a degree with good to very good results in computer science, business information systems, IT security, or a comparable qualification.
• You bring 1-2 years of professional experience for the Engineer role and 2-5 years for the Senior Engineer role.
• You have solid knowledge of software development, for example Java, Python, TypeScript, or Go, and a strong interest in considering security from the very beginning.
• You are familiar with cloud infrastructures, automation, and deployment processes.
• You have experience with clean code, design patterns, and software quality, and can also apply these principles to automation and infrastructure code.
• You are familiar with version control, especially Git, and code reviews.
• You know common secure coding practices and have a good understanding of typical vulnerabilities, such as the OWASP Top 10.
• You have knowledge of container technologies, such as Docker and Kubernetes, and how to secure them.
• You have practical experience with infrastructure as code or would like to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi.
• You have experience with automated testing, for example unit, integration, and security tests, and are also familiar with approaches for the automated validation of infrastructure configurations.
• Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes across AWS, Azure, or GCP.
• Ideally, you understand modern security architectures, such as zero trust, least privilege, and defense in depth.
• Ideally, you already hold certifications in the field of security.
• You think not only technically but also analytically, and can assess and prioritize security risks in a structured way.
• You enjoy familiarizing yourself with new technologies and security topics and continuously developing your knowledge.
• You enjoy working in a team, take responsibility for your topics, and drive them forward independently.
• You communicate confidently in German and English and can explain complex topics clearly, including when interacting with clients.
• You do not just want to implement solutions, but actively help shape them and contribute to real success in projects and in building new topics.
• You already have experience in a consulting environment or in working with clients.
• You have very good German and English language skills (minimum C1 level in both languages)

YOUR BENEFITS

• Supportive Team Culture: Team cohesion is important to us - we support one another and foster a healthy office culture. Our event team organizes regular after-work events to encourage exchange and connection beyond the workplace.
• Early Ownership & Responsibility: From day one, you will take on exciting tasks with real responsibility - whether on your project or by contributing to internal initiatives. You help shape the way we work.
• Clear Career Development Paths: You will find an environment that supports, challenges, and advances your professional growth. We offer clearly defined career paths and a transparent competency framework for every level.
• Creative Work Environment: We give you the freedom and time to develop creative solutions and provide the best, most modern hardware to support you (Apple or Windows).
• Employee Benefits: Flexible working models, a BahnCard, JobRad, Spendit card, Wellpass, and a company pension scheme contribute to your well-being. In addition, you'll enjoy the best coffee from our new espresso machine and a fully stocked soft drinks fridge in the office.
• Attractive Vacation Policy: You benefit from 30 days of paid vacation per year and the flexibility to work from home.