(Senior) Application Security Architect (m/f/x) onsite / remote in Germany

TN Germany; München; Hybrid; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

Join a rapidly growing Fintech startup that is reshaping the financial landscape in Europe. As an Application Security Architect, you will play a crucial role in embedding security into the software development lifecycle (SDLC), ensuring that applications are resilient against potential threats. You will collaborate with diverse teams to implement secure coding practices and conduct threat modeling, all while staying updated on emerging security technologies. This position offers the flexibility to work from Munich, Berlin, or remotely within Germany, along with access to the latest tools, a supportive team environment, and an attractive compensation package that includes a pension scheme and flexible vacation policy.

Leistungen

Flexible vacation policy

Remote work options

Access to latest hardware

Education budget

Free language classes

International relocation support

Company pension scheme

Monthly contribution for ‘Deutschland Jobticket’

Complimentary subscription of PRIME+ Broker

In-house knowledge sharing sessions

Qualifikationen

• 5+ years in application security or software development.
• Experience with secure coding, threat modeling, and security frameworks.
• Proficiency in programming languages like Java, Kotlin, or Python.

Aufgaben

• Develop and implement security architectures for applications.
• Conduct threat modeling and recommend mitigation strategies.
• Integrate security practices into the SDLC.

Kenntnisse

Application Security

Secure Coding Practices

Threat Modeling

Code Reviews

Security Testing

Communication Skills

Cloud Security

Programming (Java, Kotlin, Python)

Ausbildung

Bachelor's or Master's in Computer Science

Tools

SAST

DAST

IAST

Jobbeschreibung

Job Description

As an Application Security Architect, you will support the embedding of security into all phases of the SDLC. This includes collaborating with development teams to implement secure coding practices, performing threat modeling, and ensuring that applications are resilient against potential security threats. The role also involves staying abreast of emerging security threats and technologies to continuously enhance the organization's security posture.

Key Responsibilities

1. Develop and implement security architectures for applications, ensuring alignment with organizational security policies and compliance requirements.
2. Conduct threat modeling exercises to identify potential security vulnerabilities and recommend mitigation strategies.
3. Perform in-depth code and design reviews, delivering actionable remediation guidance.
4. Integrate security practices into the SDLC, including code reviews, static and dynamic analysis, and security testing.
5. Work closely with cross-functional teams, including developers, QA, and operations, to ensure security is considered at every stage of application development.
6. Develop and maintain application security standards, guidelines, and best practices.
7. Evaluate, implement, and manage application security tools such as SAST, DAST, and IAST solutions.
8. Participate in incident response activities related to application security breaches, including root cause analysis and remediation planning.
9. Provide training and guidance to development teams on secure coding practices and emerging security threats.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years in application security, software development, or related roles.
• Proven experience with secure coding practices, security assessments, authentication/authorization design, cryptography, API protection, and integrating security into the SDLC.
• Proven record of facilitating threat modeling and delivering risk‑balanced solutions to engineering teams.
• Experience integrating and tuning security-testing tools in CI/CD workflows.
• Strong understanding of application security frameworks and standards (e.g., OWASP ASVS, SAMM, NIST).
• Proficiency in programming languages such as Java, Kotlin, or Python.
• Experience with cloud security principles and securing applications in cloud environments (AWS in particular).
• Clear, persuasive communication skills for both technical and non‑technical audiences.
• Ability to work independently and manage multiple projects simultaneously.

Additional Information

• Be part of one of the fastest-growing and most visible Fintech startups in Europe, creating innovative services that have a substantial impact on the lives of our customers.
• Work with an international, diverse, inclusive, and ever-growing team that loves creating the best products for our clients.
• Work from our centrally located offices in Munich or Berlin, or choose to work remotely within Germany (if eligible).
• Access to the latest hardware and tools to support your productivity.
• Join our in-house knowledge sharing sessions and utilize your Education Budget for growth.
• Experience German culture through our free language classes.
• International relocation support available.
• Flexible vacation policy and the option to work from abroad.
• Attractive compensation package and company pension scheme.
• Monthly contribution of 25% for the ‘Deutschland Jobticket’.
• Enjoy a complimentary subscription of Scalable Capital's PRIME+ Broker.