Security & Resilience Application Manager (f/m/d)

PSI Software AG; Aschaffenburg; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Corporate Benefits

Flexible Working Time

Mobile working

Job summary

PSI Software AG in Aschaffenburg, Germany seeks an Application Security Expert. This role involves communicating security risks, implementing secure development life cycles, and collaborating across functions to enhance security measures. Candidates should possess strong knowledge of web application vulnerabilities and secure coding practices, proficiency with Docker, and ideally hold a CISSP certification. PSI offers corporate benefits, flexible working hours, and remote working options.

Qualifications

• Strong understanding of web application vulnerabilities (e.g., OWASP Top 10) and remediation strategies.
• Proficiency in secure coding practices and development methodologies.
• Knowledge of security frameworks and standards (e.g., NIST Cybersecurity Framework, OWASP ASVS).

Responsibilities

• Communicate technical information to stakeholders, including senior leadership and customers.
• Collaborate with cross-functional teams to ensure effective communication of security risks.
• Design and implement secure application architectures that align with organizational security policies.

Skills

Web application vulnerabilities

Secure coding practices

Cloud-based platforms

Analytical mindset

Excellent communication skills

Proactivity driver attitude

Education

CISSP or related security certifications

Tools

Docker

Job description

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

Your Tasks

• Communicate technical information to both technical and non-technical stakeholders, including senior leadership and customers
• Enable and support product-specific application security roles across our various business units
• Coordinate, align, track and steer business unit specific product and project security roles to achieve secure SDLC implementation across PSI
• Form a community and foster knowledge exchange, provide guidance, feedback, training and professional development opportunities to the business unit application security roles
• Collaborate with cross-functional teams, including development, operations, security, and compliance, to ensure effective communication of security risks and recommendations
• Define and implement application security measures
• Design secure SDLC and create corresponding concepts, standards and guidance materials
• Select, introduce and operate SAST and DAST
• Design Threat Modelling using industry frameworks like STRIDE or PASTA and implement together with Product Security Officer
• Coordinate information security test management
• Ensure security across CI/CD pipelines and practices
• Application vulnerability and patch management incl. SBOM
• Ensure usage and compliance to open-source software licenses
• Promote secure coding practices and educate developers on the importance of security in software development
• Design and implement secure application architectures that align with organizational security policies and standards

Your Profile

• Strong understanding of web application vulnerabilities (e.g., OWASP Top 10) and remediation strategies
• Proficiency in secure coding practices and development methodologies
• Experience with cloud-based platforms and containerization (e.g., Docker)
• Knowledge of security frameworks and standards (e.g., NIST Cybersecurity Framework, OWASP ASVS)
• CISSP, or related security certifications
• Great enthusiasm for Information Security
• Intrinsic motivation, never ending curiosity
• Quick thinking and continuous learning personality and thus are able to dive into new topics quickly, filter and digest the relevant information
• Inquisitive and analytical mindset
• Strong problem-solving and analytical abilities
• Excellent communication skills verbal and written, clear and to the point
• Proactivity driver attitude happy to collaborate with others
• Ability to work comfortably in a lean and agile environment

We Offer

• Corporate Benefits
• Flexible Working Time
• Mobile workingfruits & drinks

Pioneering a smarter world. Are you on board?

UteGraalmann
HR Manager
[phone]