Lead Security Engineer

abridge; Deutschland; Remote; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A healthcare technology company in Germany is seeking experienced security engineers to enhance their AI-powered applications' security. Candidates will define secure coding standards, conduct threat modeling, and work collaboratively with engineering teams. Required skills include experience in secure development practices and a user-centric mindset. This role promises engaging challenges and professional growth opportunities.

Qualifikationen

• Experience with secure coding standards.
• Proficiency in performing architectural and code reviews.
• Ability to conduct threat modeling and risk assessments.

Aufgaben

• Define and implement secure coding standards.
• Perform architectural and code reviews.
• Execute threat modeling and risk assessments.

Jobbeschreibung

Overview

Our generative AI-powered products are bringing joy back to the practice of medicine, and we’re looking for experienced security engineers to join our growing US-based engineering team. You’ll serve as a subject matter expert to help us build applications that are secure from current and future information security threats, and will be involved at all stages of the software development lifecycle.

Responsibilities

• Help define and implement secure coding standards, and work with engineers and engineering management to advocate for and implement these standards.
• Perform architectural and code reviews, with a focus on secure development practices.
• Perform threat modeling and risk assessment, both standalone and as part of our larger security and compliance program.
• Identify and remediate security vulnerabilities through manual and automated testing.
• Incorporate automated tools such as SAST / DAST / RASP / SCA into the development process, such as by augmenting CI + CD pipelines.
• Lead triage of incoming issues, and work with engineering teams to remediate known or suspected security vulnerabilities.
• Train and mentor engineers on secure development practices.
• Research commercial and open-source solutions, and make build vs buy recommendations to bring new capabilities into the technology organization.
• Build deep user empathy and maintain a user-centric mindset.
• Communicate regularly and effectively within and on behalf of our cross-functional product delivery teams. You’ll work with other disciplines including product, machine learning, and platform engineering, and will have opportunities to learn from and contribute to projects across the company.