Head of Product Security Engineer (f/m/d)

ATOSS Software SE; München; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Profit sharing

Employee stock program

Hybrid work (EU)

Zusammenfassung

ATOSS Software SE is seeking a senior Security Engineer to establish and enhance secure development practices, lead threat modeling and code reviews, and oversee vulnerability management across our B2B SaaS platform. You will ensure compliance with GDPR, ISO 27001, SOC 2, and related standards while embedding security controls into development workflows.

With 5+ years in product security and strong cloud architecture knowledge, you will partner with Legal, IT, and Product Management, shaping

Qualifikationen

• Bachelor’s degree in computer science, information security, or related field; Master’s/PhD preferred.
• 5+ years in product security, application security, or secure software development.
• Ability to build and operationalize security frameworks and controls across complex product environments.
• Strong understanding of regulatory/certification landscapes and translating to product measures.
• Excellent English communication across technical and non-technical stakeholders.

Aufgaben

• Establish and enhance secure development practices (Secure SDLC, DevSecOps).
• Lead threat modeling, architecture and code reviews, and oversee vulnerability management.
• Ensure product compliance with GDPR, ISO 27001, SOC 2, and related regulations; embed controls in workflows.

Kenntnisse

Secure coding practices

Threat modeling

Cloud architecture

Regulatory compliance

English communication

Ausbildung

Master’s or PhD in CS or information security

Bachelor’s degree in CS or related field

Jobbeschreibung

About Us

ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people.

About Us

ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people.

We’re a rare company: according to Handelsblatt (10/24), just 309 public companies worldwide achieved over 20% return on sales for ten consecutive years. Only two are based in Germany and ATOSS is one of them.

With 19 years of record breaking growth, over €2 billion market cap, and listings in SDAX and TecDAX, we’re scaling globally and we’re growing.

If you’re ready to drive impact in a high-performing B2B SaaS environment, this is your chance to elevate your career.

The Person You are

At ATOSS, we hire for both character and skill, seeking individuals who embody resilience, a pioneering spirit, and the passion to grow.

We Value Those Who

• Think like entrepreneurs – taking ownership, pushing boundaries, and driving impact.
• Challenge the status quo – bringing fresh ideas and bold execution to the table.
• Thrive in change – seeing growth as a lifelong journey, both professionally and personally.

The Role

• Establish and enhance secure development practices (Secure SDLC, DevSecOps), lead threat modeling, architecture and code reviews, and oversee vulnerability management and product‑related incident response.
• Build and operate security testing frameworks covering regular, occasion‑based, and continuous testing—and monitor product‑related threat intelligence.
• Ensure ongoing product compliance with relevant regulations and standards (Cyber Resilience Act, EU AI Act, GDPR, ISO 27001, SOC 2), embed required controls into development workflows, and maintain audit‑ready evidence such as SBOMs and documentation.
• Security partner for AI adoption - Partner with engineering teams to securely deploy AI capabilities, establishing best practices for AI models, secure data ingestion, and the monitoring of AI specific attack vectors.
• Act as the primary product security contact for presales, auditors, customer inquiries, and product security incidents, communicating transparently with technical and non‑technical stakeholders.
• Collaborate cross‑functionally with Legal, Information Security & Infrastructure Compliance, IT, Cloud Operations, and Product Management to align on regulatory interpretation, certification needs, and incident processes.
• Use security metrics and threat insights to continuously strengthen product security across the entire lifecycle.
• Security advocacy & culture by building and mentoring security champions across engineering teams. You will act as a bridge between Legal, Product Management, and Cloud Ops to ensure security is a shared responsibility, not a bottleneck.

Key Requirements

• A degree from a reputed university in computer science, information security, or a related field; a Master’s or PhD is preferred.
• 5+ years of experience in product security, application security or secure software development, including secure coding and cloud architectures.
• A proven ability to build and operationalize security frameworks and controls across complex product environments.
• Strong understanding of regulatory and certification landscapes and the ability to translate compliance requirements into concrete product measures.
• Excellent communication skills in English (negotiation‑ready and effective across technical and non‑technical stakeholders).

Our Benefits

• Competitive Rewards: Including profit-sharing and employee stock program.
• Structured Onboarding & Continuous Leadership Development: Clear career paths onboarding through Expert & Leadership Tracks, plus access to ATOSS Academy.
• Flexible Work Culture: Hybrid options (remote within the EU), 30 days of vacation, and a strong commitment to diversity & inclusion.
• Engaging Team Environment: Seasonal company events, team retreats, and an in-house barista.
• Health & Wellbeing: Including regular check-ups, corporate wellness programs, and Wellhub membership.
• Stability & Growth: Company listed on SDAX & TecDAX, with 20+ years of record-breaking revenue and a 30%+ EBIT margin. Certified Top Employer© for the 5th year in a row.

At Atoss, great talent knows no limits. We welcome professionals from all backgrounds and empower their growth through an inclusive, skill focused environment.

Join us and be part of a high-growth, future-focused company!