Security Lead – Team Platform

Jobtailor; Berlin; Vor Ort; EUR 120.000 - 180.000; Vollzeit

Zusammenfassung

Jobtailor in Berlin is seeking a Senior Security Leader to own the security architecture roadmap, drive risk reduction, and partner with engineering and product on new initiatives including AI tooling.

You will lead security engineers and GRC/IT, co-own audit readiness for SOC 2 and ISO 27001, and stay hands-on to harden cloud, CI/CD pipelines, and threat detection while guiding the organization toward safer, scalable growth.

Qualifikationen

• 5+ years in product/application/cloud security at a SaaS company.
• Experience prepping for SOC 2 Type II and ISO 27001.
• Has managed or tech-led 2–4 engineers before.
• Strong on AWS, IAM, K8s, secrets mgmt, vuln mgmt, threat modeling, DevSecOps in CI/CD.
• Exposed to Backend / SRE (Python, Bash, Terraform).
• Track record of measurably reducing org-wide risk.
• Influences without authority; can pull Eng/Product toward the right call.
• Deep IC experience - set security direction for a meaningful org.

Aufgaben

• Set the security architecture roadmap: threat model, control framework, key projects (data classification, secrets mgmt, IAM hardening, supply chain).
• Drive residual risk down - own the list, sequence the work, report to leadership monthly.
• Manage security engineers, GRC and IT (1:1s, growth, performance), heavy technical leadership.
• Be the security partner for Eng/Product on new initiatives (AI tooling, Enterprise features).
• Co-own audit readiness with GRC: SOC 2, ISO 27001, customer security reviews.
• Stay hands-on: ship automation and services, harden cloud + code, catch threats early.

Tools

Terraform

Python

Bash

AWS

Kubernetes

IAM

Vulnerability management

Threat modeling

Jobbeschreibung

• Set the security architecture roadmap: threat model, control framework, key projects (data classification, secrets mgmt, IAM hardening, supply chain).
• Drive residual risk down - own the list, sequence the work, report to leadership monthly.
• Manage security engineers, GRC and IT (1:1s, growth, performance), heavy technical leadership.
• Be the security partner for Eng/Product on new initiatives (AI tooling, Enterprise features).
• Co-own audit readiness with GRC: SOC 2, ISO 27001, customer security reviews.
• Stay hands-on: ship automation and services, harden cloud + code, catch threats early.

Requirements

• 5+ yrs in product / application / cloud security at a SaaS company.
• Experience prepping for SOC 2 Type II + ISO 27001.
• Has managed or tech‑led 2–4 engineers before (formally or as tech lead with people responsibilities).
• Strong on AWS, IAM, K8s, secrets, vuln mgmt, threat modeling, DevSecOps in CI/CD.
• Exposed to Backend / SRE (Python, Bash, Terraform).
• Track record of measurably reducing org-wide risk (not just running programs).
• Influences without authority; can pull Eng/Product toward the right call.
• Deep IC experience - e.g has set the security direction for a meaningful org.

Core Competencies

Demonstrates extensive experience in product, application, and cloud security within a SaaS environment, with a strong focus on risk management, security architecture, and compliance with SOC 2 and ISO 27001 standards. Proven ability to lead technical teams, influence cross-functional stakeholders, and implement security initiatives that measurably reduce organizational risk.