Security engineer

Wire; Berlin; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

30 дней отпуска

Urban Sports Club

€1,000 ежегодный бюджет на образование

Офис в Берлине; гибридный режим

Job summary

Wire — ведущий поставщик защищённых коммуникаций. В роли Senior Product Manager в Product Engineering вы будете отвечать за безопасность продукта, участие в моделировании угроз, взаимодействие со стейкхолдерами и сопровождение сертификаций.

Работа допускается удалённо из Германии или другой страны ЕС с очными сессиями в Берлине. Задачи включают обзор изменений по безопасности, ведение документации, участие в аудитах и обучение сотрудников.

Qualifications

• Понимание безопасной разработки ПО, моделирование угроз и архитектурный обзор.
• Опыт оценки рисков безопасности и приватности в функциональности продукта (авторизация, шифрование, данные, API).
• Опыт облачной безопасности (AWS) и инструментов инфраструктуры (Kubernetes, Terraform, Helm).

Responsibilities

• Рассмотрение изменений с точки зрения безопасности и предложение решений.
• Поддержка документации по безопасности и сертификаций продукта.
• Коммуникация с внутренними и внешними стейкхолдерами по темам безопасности.
• Поддержка новых фич с точки зрения безопасности и приватности.
• Участие в аудитах безопасности, оценке рисков и threat modelling.
• Проведение тренингов по осведомлённости в области безопасности.
• Контроль за мерами SecOps платформы.
• Сопровождение due diligence по ИБ и защите данных.
• Руководство процессами инцидент-менеджмента и участие в их разрешении.
• Документация процессов безопасности и приватности.
• Поддержка управлением доступом и идентификацией Wire.
• Внедрение и поддержка SecOps для нашей платформы.

Skills

Secure SDLC

Threat modelling

Security architecture

Cloud security (AWS)

Kubernetes

Terraform

OAuth/SO/IAM

Tools

AWS

Kubernetes

Terraform

Helm

Job description

Описание

We prioritise privacy as a fundamental right, delivering the most secure communication experience across various industries. Our cutting-edge encryption technology and robust security measures have made us a trusted partner in the technology, finance, healthcare, and government sectors. If you are passionate about redefining secure communication and want to be part of an innovative team, join us as a Senior Product Manager within our Product Engineering organisation. Together, let us build a world where privacy and security shape the future of communication.

Задачи

• You review security- or privacy-critical changes and implement or propose solutions to potential issues
• You help to maintain security documentation of the product with focus on product certifications
• You communicate with internal and external stakeholders regarding product security topics
• You support new feature development from a security point of view to identify possible security or privacy pitfalls early in the process
• You contribute to internal security audits, risk assessments and threat modelling workshops
• You conduct security awareness trainings regarding your field of responsibility
• You are responsible for our Platform Security controls
• You support technical due diligence to ensure compliance with information security and data protection requirements
• You oversee the incident management process and team members involved in resolving the incident
• You help to maintain documentation of security- and privacy-related processes
• You support Wire's identity and access management
• You drive the implementation and maintenance of SecOps measures for our Platform

Требования

• Proficient understanding of secure software development practices, including threat modelling and security architecture review for products.
• Hands-on experience assessing security and privacy risks in product features (e.g., authentication, encryption, data handling, APIs).
• Working knowledge of cloud security fundamentals (e.g., AWS) and common infrastructure tools (Kubernetes, Terraform, Helm).
• Experience supporting security certifications/compliance frameworks (e.g., ISO 27001, GDPR).
• Strong communication skills and experience engaging both technical and non-technical stakeholders on security and privacy topics.
• You are a good communicator and you like to work in a team.
• You are interested in and keep up with trends and news from the InfoSec world.
• You are self-motivated to identify security problems and engage with teams to find solutions.
• You like to do in-depth research on your own and present the results to the team.
• You have programming experience, preferably with one or more of JavaScript, TypeScript, Swift, Kotlin, Java, Rust and Haskell.
• You have a thorough understanding of security code reviews, bug triage based on common metrics like CVSS, and vulnerability management.
• You have a practical, working understanding of basic cryptographic ciphers/algorithms and understand protocols or concepts like Elliptic Curve, TLS, Public Key Infrastructure and Messaging Layer Security.
• You have a strong understanding of application security frameworks like OWASP Top 10.
• You bring thorough knowledge of OAuth, SSO, Identity and Access Management systems.
• You are willing to subject yourself to the S2 security check of the German Government.

Будет плюсом

• Ideally, you have relevant security and/or DevOps certifications, such as CKS, etc;
• You are familiar with GitHub, Jira and Confluence

Условия

This role can be performed remotely from Germany or another EU country. Regular travel to our Berlin office for workshops, and selected in-person collaboration sessions is expected.

• Join a market-proven company with more than 1,000 customers and help Wire become the trusted secure communications partner for organisations that care deeply about security and privacy.
• Participate in Wire's long-term success through VSOPs.
• 30 days of vacation entitlement, allowing you to take well-deserved time off and maintain a healthy work-life balance.
• With an Urban Sports Club subscription, stay balanced and mentally and physically healthy.
• Investment in professional development with an annual education budget of €1,000 and access to top-notch learning resources.
• Work from a beautiful office in the heart of Berlin or choose a mix of working from anywhere vs. spending selected days together in our office to connect on a personal level.
• Enjoy fresh breakfast in the office, daily fruits, snacks, free soft drinks, and a nice Barista coffee machine.