(Senior) Application Security Architect (m/f/x) onsite / remote in Germany

Scalable Capital; München; Hybrid; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

Scalable Capital sucht einen (Senior) Application Security Architect, um Sicherheitspraktiken in alle Phasen des Softwareentwicklungszyklus zu integrieren. In dieser Rolle sind Sie verantwortlich für die Durchführung von Bedrohungsanalysen, das Überprüfen von Sicherheitsstandards und die Zusammenarbeit mit Entwicklungsteams zur Sicherstellung der Anwendungssicherheit. Die Position bietet Flexibilität, die Möglichkeit, remote zu arbeiten, sowie zahlreiche Zusatzleistungen.

Leistungen

Flexible Urlaubsregelung

Monatlicher Beitrag zum Deutschland Jobticket

Kostenlose Deutschkurse

Attraktive Vergütung

Unterstützung bei der internationalen Umsiedlung

Qualifikationen

• Mindestens 5 Jahre Erfahrung in der Anwendungssicherheit oder Softwareentwicklung.
• Erfahrungen in der Integration von Sicherheit in SDLC-Prozesse.
• Starke Kommunikationsfähigkeiten für technische und nicht-technische Zielgruppen.

Aufgaben

• Entwicklung und Implementierung von Sicherheitsarchitekturen für Anwendungen.
• Durchführung von Bedrohungsmodellierung und Sicherheitsüberprüfungen.
• Integration von Sicherheitspraktiken in den SDLC.

Kenntnisse

Sichere Codierungspraktiken

Bedrohungsmodellierung

API-Schutz

Kryptographie

Cloud-Sicherheitsprinzipien

Programmierung in Java

Programmierung in Kotlin

Programmierung in Python

Ausbildung

Bachelor oder Master in Informatik oder Informationssicherheit

Tools

SAST

DAST

IAST

Jobbeschreibung

Social network you want to login/join with:

(Senior) Application Security Architect (m/f/x) onsite / remote in Germany, Munich

col-narrow-left

Client:

Scalable Capital

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

f81557c72fe1

Job Views:

3

Posted:

26.06.2025

Expiry Date:

10.08.2025

col-wide

Job Description:

(Senior) Application Security Architect (m/f/x) onsite / remote in Germany

• Full-time

Company Description

Scalable Capital is a leading digital investment platform in Europe. The company empowers everyone to shape their financial future. Scalable Broker makes it easy and affordable for clients to invest professionally in stocks, ETFs and other exchange-traded products and set up savings plans. Scalable Wealth, the digital wealth management service, offers clients professional investment in ETF portfolios and is also adopted as a white-label solution by renowned B2B partners. With the European Investor Exchange (EIX) Scalable Capital offers a stock exchange for retail investors in Europe. Over 27 billion euro is held on the platform by more than one million clients.

Scalable Capital was founded in 2014 and employs more than 500 people at its offices in Munich, Berlin, Vienna, and London. Together with the founding and management team around Erik Podzuweit and Florian Prucker, they are working on a new generation of financial services.

Visit our or check out our Social Media channels to find out what our Expert Teams have to say.

Our Company Values guide us every day in how we work and collaborate. To learn more about them, you can find our values (English).

Job Description

As Application Security Architect you will support the embedding of security into all phases of the SDLC. This includes collaborating with development teams to implement secure coding practices, performing threat modeling, and ensuring that applications are resilient against potential security threats. The role also involves staying abreast of emerging security threats and technologies to continuously enhance the organization's security posture.

Key responsibilities

Develop and implement security architectures for applications, ensuring alignment with organizational security policies and compliance requirements.

Conduct threat modeling exercises to identify potential security vulnerabilities and recommend mitigation strategies.

Perform in‑depth code and design reviews, delivering actionable remediation guidance.

Integrate security practices into the SDLC, including code reviews, static and dynamic analysis, and security testing.

Work closely with cross-functional teams, including developers, QA, and operations, to ensure security is considered at every stage of application development.

Develop and maintain application security standards, guidelines, and best practices.

Evaluate, implement, and manage application security tools such as SAST, DAST, and IAST solutions.

Participate in incident response activities related to application security breaches, including root cause analysis and remediation planning.

Provide training and guidance to development teams on secure coding practices and emerging security threats.

Qualifications

Qualifications

Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

Minimum of 5 years in application security, software development, or related roles.

Proven experience with secure coding practices, security assessments, authentication/authorisation design, cryptography, API protection and integrating security into the SDLC.

Proven record of facilitating threat‑modelling and delivering risk‑balanced solutions to engineering teams.

Experience integrating and tuning security‑testing tools in CI/CD workflows.

Strong understanding of application security frameworks and standards (, OWASP ASVS, SAMM, NIST).

Proficiency in programming languages such as Java, Kotlin, or Python.

Exoerience with cloud security principles and securing applications in cloud environments (AWS in particular).

Clear, persuasive communication skills for both technical and non‑technical audiences.

Ability to work independently and manage multiple projects simultaneously.

Additional Information

• Be part of one of the fastest-growing and most visible Fintech startups in Europe, creating innovative services that have a substantial impact on the lives of our customers
• Work with an international, diverse, inclusive, and ever-growing team that loves creating the best products for our clients
• Work from our centrally located offices in the heart of Munich or Berlin, nestled in lively neighborhoods filled with vibrant restaurants, cozy cafés, and a wide range of convenient amenities or choose to work remotely within Germany(if eligible for the job)
• Be productive with the latest hardware and tools
• Learn and grow by joining our in-house knowledge sharing sessions and spending your individual Education Budget
• Learn and experience German culture first hand by joining our free German language classes
• (International) relocation support
• Flexible vacation policy and the opportunity to work from abroad
• Benefit from an attractive compensation package and from the company pension scheme
• Monthly contribution of 25% for the ‘Deutschland Jobticket’
• Say goodbye to order commissions and say hello to your complimentary subscription of Scalable Capital's PRIME+ Broker

Please note that if you are NOT a passport holder of the country for the vacancy you might need a work permit. Check our Blog for more information.

Bank or payment details should not be provided when applying for a job. Eurojobs.com is not responsible for any external website content. All applications should be made via the 'Apply now' button.