Senior Security Engineer - AppSec (d/f/m)

Lever, Inc.; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

vivenu GmbH is seeking a Senior Security Engineer - AppSec to drive the end-to-end security lifecycle across our scalable, API-first ticketing platform. You will partner with engineering teams to implement threat modeling, security testing, and secure-by-design practices, enabling a shift-left security culture.

You will lead modern security checks, manage vulnerabilities, and automate guardrails into CI/CD pipelines while securing a multi-cloud, Kubernetes-based environment.

Qualifikationen

• 5+ years of dedicated Security Engineering experience in SaaS/Fintech or similar.
• Experience with secure-by-design practices and shift-left security.
• Proficiency with threat modeling and both offensive and defensive security testing.

Aufgaben

• Be a Trusted Advisor: Partner with engineering to champion security-by-design and elevate our security posture.
• Offensive & Defensive Testing: Coordinate threat modeling and security tests across product and infra.
• Lead Next-Gen Vulnerability Management: Drive triage and remediation with risk-based principles.
• Pioneer Security-as-Code: Design, implement, and automate security checks (SAST/DAST) into CI/CD pipelines.
• Review & Refine: Perform deep-dive reviews to promote secure coding practices and shift-left security.

Kenntnisse

Security engineering

Threat modeling

CI/CD security

SAST/DAST

Security testing

Tools

Kubernetes

GitHub CI/CD

Argo CD

Snyk/OSS security

Jobbeschreibung

Redefine the future of live entertainment tech

Welcome to vivenu, the global leader in event ticketing tech and one of the world’s fastest-growing live entertainment tech firms. We are transforming event ticketing for global leaders like the Grammys, the Golden Globes, Stanford University and the Hockenheimring turning what was once a simple transaction into a strategic business advantage. Backed by over $65 million in funding, our platform empowers event organizers to own their brand experience, unlock deep data insights, and seamlessly integrate ticketing into their digital infrastructure.

With six offices worldwide and growing, we deliver a customizable, intuitive solution and industry-leading support that simplify even the most complex ticketing challenges –helping organizers deliver exceptional experiences and drive real growth.

Join us and build the future of live entertainment.

With over 10 million end users and usage quadrupling annually, our infrastructure now handles over 1 billion requests per month — and counting. Our API-first platform solves complex system challenges at scale — delivering performance, flexibility, and reliability for the world’s leading live entertainment brands.

This isn't just a maintenance role — it is a blank canvas to build, scale, and architect a state-of-the-art AppSec program from the ground up. We are currently operating at a fraction of our ultimate potential, which means you have an immense, blank-canvas opportunity to fundamentally shape our security culture, processes, and tooling across the entire global engineering organization.

You will drive the entire AppSec lifecycle: from offensive red teaming and threat modeling to risk-based vulnerability management and pioneering a true shift-left culture.

What Makes This Role Challenging and Engaging:

• High-Impact Technical Environment: You won't just follow blueprints; you will holistically influence a shift-left architecture across both application and platform layers.

• Modern Technology Stack: Dive into securing a massive TypeScript monolith alongside Go supporting services, giving you hands-on experience in modern language security and advanced GitHub CI/CD pipeline hardening.

• Web and API: secure the application of the vivenu platform which provides customers with an out-of-the-box ticketing software as well as the underlying API structure

• Complex Multi-Cloud Architecture: Challenge your skills against a sophisticated multi-tenant, multi-region environment spanning k8s, GCP (our primary compute) and and separate database services

• Cutting-Edge Deployment: Secure a next-gen Kubernetes "satellite architecture" utilizing hardened private compute nodes, VPC peering, and Argo CD for GitOps—a true, modern cloud-native security mandate.

As a Senior Security Engineer - AppSec (d/f/m) your responsibilities will include:

• Be a Trusted Advisor: Partner closely with engineering teams to champion security-by-design and elevate our overall security posture.
• Offensive & Defensive Testing: Coordinate and execute threat modeling and advanced security tests across our product and underlying infrastructure.
• Lead Next-Gen Vulnerability Management: Drive triage and remediation using modern, risk-based principles like EPSS, while leveraging AI technologies to accelerate security testing at scale.
• Pioneer Security-as-Code: Design, implement, and automate security checks and guardrails (SAST, DAST, and secret scanning) directly into CI/CD pipelines.
• Review & Refine: Perform deep-dive code and configuration reviews, advocating for secure coding practices that support a proactive shift-left strategy.

What you will need to succeed in this role:

• Experience: 5+ years of dedicated Security Engineering experience, ideally within a high-growth SaaS, E-commerce, or Fintech environment.