Lead Security Engineer (Full-/Part-time) (all genders)

Biopharma Careers; Darmstadt; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Biopharma Careers seeks a Lead Security Engineer to own the security engineering vision across platforms. You will harden CI/CD pipelines, define secure defaults, and drive secure software delivery across products and shared platforms.

Collaborating with engineering, security, legal, privacy, risk, and compliance, you translate standards like ISO 27001, SOC 2, and EU Cyber Resilience Act into practical automated controls and evidence.

Qualifikationen

• Hands-on security engineering across multiple teams.
• Defined security strategies and standards into production implementations.
• Secure CI/CD pipelines, source control, build systems, and artifacts.
• Experience with IAM, IaC, vulnerability management, and software supply-chain security.
• Knowledge of ISO 27001, SOC 2, EU Cyber Resilience Act.

Aufgaben

• Own security engineering vision across products and platforms.
• Translate standards into automated controls and evidence.
• Collaborate with legal, privacy, risk, and compliance teams.
• Balance security with developer experience and delivery speed.

Kenntnisse

Security Engineering

Platform Engineering

Cloud Security

ISO 27001

SOC 2

Threat Modeling

Automation

GRC Familiarity

DevSecOps

Leadership

Tools

GitHub

JFrog

Atlassian

AWS

Jobbeschreibung

Your role

In your role as Lead Security Engineer in the Platform and Engineering Enablement team, you will own the security engineering vision, strategy, standards, and delivery roadmap across our products and shared platforms. You will simplify and harden CI/CD pipelines, establish secure defaults, improve software supply-chain and AWS cloud security, and automate controls and audit evidence using GitHub, JFrog, Atlassian, and AWS. Working with engineering, enterprise security, legal, privacy, risk, and compliance, you will translate ISO 27001, SOC 2, the EU Cyber Resilience Act, customer, and internal requirements into practical controls. You will combine long-term direction with hands‑on implementation and enable teams to deliver secure software efficiently.

Who you are

• You have extensive hands‑on experience in security engineering, platform engineering, application security, cloud security, or a related field, with technical ownership across multiple teams.
• You have defined security strategies and standards and turned them into production‑ready implementations.
• You have secured CI/CD pipelines, source control, build systems, artifacts, software releases, and cloud platforms using tools such as GitHub, JFrog, and AWS.
• You have practical experience with identity and access management, infrastructure as code, vulnerability management, security testing, threat modeling, secrets, and software supply‑chain security.
• You understand risk‑based control design and frameworks such as ISO 27001, SOC 2, or the EU Cyber Resilience Act and can translate requirements into automated controls and evidence.
• You communicate clearly, influence across teams, and balance security, developer experience, delivery speed, and operational resilience.
• Experience with software bills of materials, provenance, attestations, artifact signing, release integrity, or security considerations for AI‑assisted software development is desirable.
• Experience with Atlassian tools or relevant certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or ISO 27001 Lead Implementer or Lead Auditor is desirable.

Department: LS-TO-DP

Job evaluation: Expert 3

TA: Gap Rattimasakol