Secure Software Development Specialist (f/m/x) – Chief Security Office CTO

Deutsche Bank AG; Berlin; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Mental health support

Health check-ups

Flexible working (part-time, hybrid)

Zusammenfassung

Deutsche Bank AG in Berlin is seeking a Secure Software Development Specialist to drive shift-left security across software delivery and CI/CD platforms. You will define secure coding standards, extend blueprints, and support engineers with practical guidance.

You will train developers, run security sessions, and create accessible security resources across on-prem, GCP or hybrid environments, contributing to a strong security culture within the Global Hausbank.

Qualifikationen

• Knowledge of security standards such as ISO 27001 (or equivalent), OWASP Top 10 (e.g. encryption, security certificates, authorization and authentication, configuration), and prior experience in threat modelling (e.g. STRIDE, MITRE ATT&CK).
• Good understanding of Software Development Lifecycle (SDLC) processes and tools used by developers.
• Proven IT security experience in previous positions.
• Strong security culture and like spreading security solutions across teams.
• You like teamwork and engagement with development teams, like to collaborate with anyone around and help people and you are independent and proactive.
• Knowledge in software development and coding (e.g. Java or any other programming language).
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Aufgaben

• Work with business divisions to identify and train Security Champions from the application teams and work with them on several security topics that will be incorporated into their software projects.
• Collaborate with application teams to help them identify the application security threats by moderating the threat modelling game in preparation for the Security Design Authority (SDA) approval process.
• Create/Update security guidelines for engineers, by continuously enhancing the guidance documents and confluence pages to address secure code snippets as good practices, checklists etc.
• Educate engineers on security best practices and supporting our development communities with patterns on how to embed security in the software development.
• Organize live sessions, trainings, write security articles for on-prem, GCP or hybrid environments etc.
• You prepare and perform security training sessions and demos for engineers maintaining an open communication channel with the engineering communities.

Kenntnisse

ISO 27001

OWASP Top 10

Threat modelling

SDLC processes

IT security experience

Security culture

Team collaboration

Software development

Java programming

AI tools for productivity

Jobbeschreibung

About the job

Deutsche Bank Technology in Berlin DB Technology is a global team of tech specialists, spread across multiple trading hubs and tech centres. We have a strong focus on promoting technical excellence – our engineers work at the forefront of financial services innovation using cutting‑edge technologies. Our Berlin location is our most recent addition to our global network of tech centres and growing strongly. We are committed to building a diverse workforce and to creating excellent opportunities for talented engineers and technologists. Our tech teams and business units use agile ways of working to create GlobalHausbank solutions from our home market.

Chief Security Office (CSO)

TDI's Chief Security Office is responsible for the creation, maintenance, and implementation of the information security strategy of Deutsche Bank Group. CSO steers the measures derived from the information security strategy and provides guidance to employees regarding the identification, development, implementation, and execution of all processes which serve to reduce information security risk, to respond to incidents, and to establish appropriate policies and standards for information security management.

You'll be joining the Secure Software Development Team. The team's purpose is to drive the efficient integration of security services into DBs Software Development Processes and CI/CD Platforms, and that security is embedded as early as possible. Secure Coding Standards, best practices and guidance for application development teams are some of our core deliverables we provide to support security in software development. As a Secure Software Development Specialist (f/m/x) you will be supporting the Shift-Left-Approach to shift security responsibilities to those creating software and shift it towards the beginning of the process. The responsibility is to define our secure coding standards and continuously enhance our secure coding guidance, blueprints, and best practices on different levels so that this is easy to consume for our developers, but also satisfies external and regulatory requests.

Your key responsibilities

• Work with business divisions to identify and train Security Champions from the application teams and work with them on several security topics that will be incorporated into their software projects.
• Collaborate with application teams to help them identify the application security threats by moderating the threat modelling game in preparation for the Security Design Authority (SDA) approval process.
• Create/Update security guidelines for engineers, by continuously enhancing the guidance documents and confluence pages to address secure code snippets as good practices, checklists etc.
• Educate engineers on security best practices and supporting our development communities with patterns on how to embed security in the software development.
• Organize live sessions, trainings, write security articles for on-prem, GCP or hybrid environments etc.
• You prepare and perform security training sessions and demos for engineers maintaining an open communication channel with the engineering communities.

Your skills and experiences

• Knowledge of security standards such as ISO 27001 (or equivalent), OWASP Top 10 (e.g. encryption, security certificates, authorization and authentication, configuration), and prior experience in threat modelling (e.g. STRIDE, MITRE ATT&CK).
• Good understanding of Software Development Lifecycle (SDLC) processes and tools used by developers.
• Proven IT security experience in previous positions.
• Strong security culture and like spreading security solutions across teams.
• You like teamwork and engagement with development teams, like to collaborate with anyone around and help people and you are independent and proactive.
• Knowledge in software development and coding (e.g. Java or any other programming language).
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

This job is available in full and parttime.

What we offer

• Emotionally and mentally balanced A positive mind helps us master the challenges of everyday life – both professionally and privately. We offer consultation in difficult life situations as well as mental health awareness trainings.
• Physically thriving We support you in staying physically fit through an offering to maintain personal health and a professional environment. You can benefit from health check-ups; vaccination drives as well as advice on healthy living and nutrition.
• Socially connected Networking opens up new perspectives, helps us thrive professionally and personally as well as strengthens our self-confidence and well-being. You can benefit from PME family service, FitnessCenter Job, flexible working (e.g parttime, hybrid working, job tandem) as well as an extensive culture of diversity, equity and inclusion.
• Financially secure We provide you with financial security not only during your active career but also for the future. You can benefit from offerings such as pension plans, banking services, company bicycle or "Deutschlandticket". Since our offerings slightly vary across locations, please contact your recruiter with specific questions.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

For over 150 years, our dedication to being the Global Hausbank for our clients has been driven by our people – in around 60 countries and across more than 150 nationalities.

Their deep understanding, insights, expertise, and passion help our clients navigate an increasingly complex world – be it in our Corporate Bank, our Private Bank, our Investment Bank or our Asset Management (DWS) division. Together we can make a great impact for our clients at home and abroad, securing their lasting success and financial security.

More information at: Deutsche Bank Careers (db.com)