Security Architect

CoinTracker; Deutschland; Remote; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading security-focused tech company in Germany is looking for a Security Engineer to build and implement their security infrastructure. You will define the security roadmap and lead key initiatives like audits and incident response. The ideal candidate has over 8 years of experience in security engineering and is familiar with risks in financial services. This role offers the opportunity to shape the security culture and processes in a dynamic environment.

Qualifikationen

• 8+ years of experience in security engineering or related roles.
• Experience in fast-paced startup or growth-stage environments.
• Familiarity with risks in crypto or financial services.

Aufgaben

• Build the infrastructure for protecting systems and data.
• Define the security roadmap across various areas.
• Conduct security gap assessments and implement best practices.
• Lead initiatives like SOC 2 audits and penetration testing.
• Embed security into the software development lifecycle.
• Drive security awareness and culture across the company.

Kenntnisse

Security engineering

Incident response

Threat modeling

Vulnerability management

Tools

CISSP

GIAC

Jobbeschreibung

What we're looking for?

We need a Security Engineer with 8+ years of experience in security engineering or related technical roles, ideally in fast-paced startup or growth-stage environments. You should be comfortable defining and implementing security roadmaps, establishing core security foundations, and embedding security into engineering workflows. You will drive security operations and lead third-party audits. Bonus points if you have familiarity with the unique risks and threat models in crypto or financial services, or security certifications such as CISSP and GIAC.

What you'll do:

• As CoinTracker’s first Security Engineer, you’ll be hands-on in building the infrastructure, processes, and culture needed to protect our systems, data, and users.
• Define and execute the security roadmap, balancing near-term wins with long-term investments across infrastructure, cloud, application security, and security operations.
• Conduct security gap assessments and implement baseline controls, policies, and best practices.
• Lead key security initiatives including third-party audits (e.g. SOC 2, penetration testing), security certifications (ISO 27001), incident response readiness, and vulnerability management.
• Partner closely with engineering teams to embed security into SDLC — from threat modeling to code scanning to secrets management.
• Foster a strong security culture across the company by driving awareness, education, and best practices.