Security Engineer

Jobtailor; Deutschland; Vor Ort; EUR 80.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a security-focused professional to bolster our application security posture. You will perform code reviews, manage vulnerabilities, and coordinate audits to safeguard our stack.

The role involves security automation, AI/LLM security awareness, and close collaboration with engineering to ship secure software. You’ll own monitoring of security channels, run phishing simulations, and help evolve our risk register and GRC documentation.

Qualifikationen

• Solid experience in application security (code review, vulnerability management).
• Experience coordinating or conducting penetration tests / security audits.
• Comfortable shipping code and working with Git/GitHub workflows.
• Scripting/automation skills.
• Bonus: familiarity with AI/LLM security concepts (prompt injection, jailbreaking, adversarial testing).
• Strong communication & collaborative skills (perfectly fluent in English).
• Goal-orientated, ownership and commitment.
• Doer mindset - capable of balancing execution, planning and strategy.

Aufgaben

• Perform weekly code reviews to catch vulnerabilities before they ship
• Track, prioritize, and drive remediation of security vulnerabilities across the stack
• Coordinate external security audits and penetration tests, and follow through on findings
• Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed
• Support audit follow-up and keep GRC documentation up to date
• Communicate new threats to the team, document findings, and broadcast security updates company-wide
• Run phishing simulations and security training (via Riot)
• Own the monitoring of security channels and alerts, including weekend coverage
• Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning
• Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass)
• Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

Kenntnisse

Application Security

Vulnerability Management

Penetration Testing

Git/GitHub Workflows

Scripting/Automation

Tools

Git

GitHub

MDM

Jobbeschreibung

• Perform weekly code reviews to catch vulnerabilities before they ship
• Track, prioritize, and drive remediation of security vulnerabilities across the stack
• Coordinate external security audits and penetration tests, and follow through on findings
• Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed
• Support audit follow-up and keep GRC documentation up to date
• Communicate new threats to the team, document findings, and broadcast security updates company-wide
• Run phishing simulations and security training (via Riot)
• Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered
• Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning
• Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass)
• Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

Requirements

• Solid experience in application security (code review, vulnerability management)
• Experience coordinating or conducting penetration tests / security audits
• Comfortable shipping code and working with Git/GitHub workflows
• Scripting/automation skills
• Bonus: familiarity with AI/LLM security concepts (prompt injection, jailbreaking, adversarial testing) — this is still an emerging field, so curiosity matters more than proven experience
• Strong communication & collaborative skills (perfectly fluent in English)
• Goal-orientated, ownership and commitment
• Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy
• Humble - willing to learn, open to feedback
• Comfortable working in an environment with products that are based on uncensored models and content

Core Competencies

Demonstrates expertise in application security, including code review and vulnerability management, while effectively communicating security updates and coordinating audits. Proficient in scripting and automation, with a strong focus on emerging AI security concepts and a commitment to continuous learning.

Highest-signal resume keywords

• Application Security
• Vulnerability Management
• Penetration Testing
• Git/GitHub Workflows
• Scripting/Automation

ATS Optimization Keywords

Hard Skills

• Code Review
• Vulnerability Management
• Penetration Testing
• Scripting
• Automation

Soft Skills

• Strong Communication
• Collaborative Skills
• Goal-Oriented
• Ownership
• Humble

Industry Keywords

• Security Audits
• Risk Register
• GRC Documentation
• Phishing Simulations
• Emerging Attack Techniques

Tools & Technologies

• Git
• GitHub
• MDM