Principal Software Security Officer (m/f/d)

Giesecke & Devrient GmbH; München; On-site; EUR 120,000 - 160,000; Full time

Job summary

Giesecke+Devrient Currency Technology (G+D) seeks a Principal Software Security Officer to own the governance and evolution of our Secure Software Development Lifecycle (SSDLC). You will drive Security by Design across the software lifecycle, collaborating with engineering, architecture, product management, and security teams to raise security standards and risk visibility.

You will shape security gates, support audits, and mentor teams while ensuring secure software development across the

Qualifications

• Degree or equivalent in a relevant technical field and strong foundation in software security.
• Experience in software engineering, architecture, and security across product lifecycles.
• Proven ability to translate security concepts into practical, business-focused solutions.
• Familiarity with cloud security, DevSecOps, and modern security standards.

Responsibilities

• Establish, evolve, and oversee the Secure Software Development Lifecycle (SSDLC).
• Define security standards, policies, and processes across the organization.
• Advise teams on Security by Design principles.
• Conduct threat modeling, risk assessments, and security reviews.
• Assess architectures, APIs, cloud solutions, and integration concepts for security.
• Embed security requirements into CI/CD and release workflows.
• Oversee security gates and acceptance criteria.
• Evaluate third-party software and software supply chains.
• Support security testing, vulnerability management, and remediation.
• Coach engineers and Security Champions in secure development practices.

Skills

Software engineering

Software architecture

Application security

Product security

SSDLC knowledge

Education

Degree in Computer Science, Information Security, Software Engineering, or a comparable qualification

Tools

OWASP SAMM

OWASP ASVS

NIST SSDF

IEC 62443-4-1

OWASP Top 10

CWE

Job description

Select how often (in days) to receive an alert:

We provide security solutions for over 145 central banks worldwide.

Principal Software Security Officer (m/f/d)

Location:

Munich, DE

G+D makes the lives of billions of people around the world more secure. We create trust in the digital age with integrated security technologies in three business areas: Digital Security, Financial Platforms and Currency Technology. We have been a reliable partner for our customers for over 170 years with our innovative solutions for SecurityTech! We are an international technology group and traditional family business with over 14,000 employees in 40 countries. Creating Confidence is our path to success. Trust is the basis of our co-operation within G+D.

The whole world trusts us when it comes to digital, physical or electronic payments. We increase the security and efficiency of the cash cycle in collaboration with central banks and the entire currency industry. As the market leader in advanced currency management, would you like to join us in shaping the future of payments?

Define the standards. Challenge the risks. Strengthen our software security.

Secure software does not happen by accident.

At Giesecke+Devrient Currency Technology, we develop technologies and solutions that help create trust worldwide. From digital products and manufacturing systems to complex software platforms operating in highly sensitive environments, security is not an add-on. It is a fundamental requirement.

That's why we're looking for someone who thinks about software security holistically. Someone who doesn't just identify risks but establishes standards. Someone who empowers teams to build secure software. Someone who sees security as an enabler of innovation rather than a barrier to it.

As a Principal Software Security Officer, you will be part of our multidisciplinary Global Security organization. Operating independently from development teams, you will help shape the future of secure software development across G+D.

Your Mission

You will own the governance and continuous evolution of our Secure Software Development Lifecycle (SSDLC).

Working closely with engineering, architecture, product management, and security teams, you will ensure that Security by Design becomes an integral part of the entire software lifecycle.

Your Responsibilities

• Establish, evolve, and oversee our Secure Software Development Lifecycle (SSDLC)
• Define software security standards, policies, and processes across the organization
• Advise development and architecture teams on Security by Design principles
• Conduct threat modeling exercises, risk assessments, and security reviews
• Assess software architectures, APIs, cloud solutions, and integration concepts from a security perspective
• Embed security requirements into development processes, CI/CD pipelines, and release workflows
• Define and oversee security gates and security acceptance criteria
• Evaluate third-party software, open-source components, and software supply chains
• Support security testing, vulnerability management, and risk remediation activities
• Coach and mentor developers, architects, and Security Champions on secure development practices
• Contribute to audits, supplier assessments, and customer-facing security assurance activities
• Assess emerging technologies, cloud services, and AI-assisted software development from a security perspective

Your Qualifications

• Degree in Computer Science, Information Security, Software Engineering, or a comparable qualification
• Experience in software engineering, software architecture, application security, product security, or a related technical field
• Genuine interest in secure software development and modern software architectures
• Knowledge of secure software development practices, including SSDLC, threat modeling, secure coding, security testing, and vulnerability management
• Understanding of cloud security and DevSecOps principles
• Familiarity with industry standards and frameworks such as OWASP SAMM, OWASP ASVS, NIST SSDF, IEC 62443-4-1, OWASP Top 10, and CWE
• Strong analytical thinking and a structured approach to problem solving
• Excellent communication skills with the ability to collaborate effectively across diverse teams and stakeholders
• Ability to translate complex security concepts into practical and business-oriented solutions
• Collaborative mindset with a passion for driving security excellence across the software development lifecycle
• Strong written and spoken English skills
• Curiosity, continuous learning, and enthusiasm for staying up to date with evolving security trends and technologies
• Motivation to make a meaningful impact by helping teams build secure and resilient software products across the organization

Why This Role Is Different

This position combines technical depth, strategic influence, and meaningful impact.

You will become part of a global security organization and help shape how secure software development is implemented across an international technology company.

Your influence will extend across digital products, internal applications, and complex software supply chains.

You won't be working on just one project.

You will help define the security standards for an entire organization.

We believe in potential, not checklists.

If this role excites you, we'd love to get to know you.

$$ We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment, free from prejudice, discrimination and harassment, in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender, age, race or ethnic origin, social and cultural background, religion, disability and sexual orientation.

We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment, free from prejudice, discrimination and harassment, in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender, age, race or ethnic origin, social and cultural background, religion, disability and sexual orientation.

We are looking forward to receiving your application!