Senior Security Engineer (f/m/d)

Wire Enterprise; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

30 days vacation entitlement

Urban Sports Club access

Annual education budget €1,000

Office access in Berlin or remote work

Zusammenfassung

Wire Enterprise seeks a Senior Product Manager for Product and Platform Security, shaping secure development and risk reviews. You will collaborate with the Director of Information Security and cross-functional teams to embed security in every release, from design to deployment, ensuring privacy by design and regulatory alignment across products.

The role offers remote EU work with Berlin workshops and periodic in-person collaboration.

Qualifikationen

• Proficient understanding of secure software development practices, including threat modelling and security architecture review for products.
• Hands-on experience assessing security and privacy risks in product features (e.g., authentication, encryption, data handling, APIs).
• Working knowledge of cloud security fundamentals (e.g., AWS) and common infrastructure tools (Kubernetes, Terraform, Helm).
• Experience supporting security certifications/compliance frameworks (e.g., ISO 27001, GDPR).
• Strong communication skills and experience engaging both technical and non-technical stakeholders on security and privacy topics.
• Ideally, you have relevant security and/or DevOps certifications, such as CKS, etc.
• You are familiar with GitHub, Jira and Confluence.
• You bring knowledge of OAuth, SSO, IAM systems and OWASP Top 10.

Aufgaben

• Review security- or privacy-critical changes and propose solutions to potential issues.
• Maintain security documentation with focus on product certifications.
• Communicate with internal and external stakeholders on product security topics.
• Support new feature development from a security point of view to identify pitfalls early.
• Contribute to internal security audits, risk assessments and threat modelling workshops.
• Conduct security awareness trainings within your scope.
• Oversee Platform Security controls and incident management processes.
• Drive SecOps measures for our Platform and assist in due diligence for compliance.

Kenntnisse

Threat modelling

Security architecture review

Authentication

Encryption

Data handling

APIs

Cloud security fundamentals

AWS

Kubernetes

Terraform

Helm

ISO 27001

GDPR

CKS

GitHub

Jira

Confluence

OWASP Top 10

OAuth

SSO

Identity and Access Management

Tools

AWS

Kubernetes

Terraform

Helm

GitHub

Jira

Confluence

Jobbeschreibung

Berlin, Austria, European Union, France, Germany, United Kingdom

Full-time

Temporary

WHO WE ARE

We prioritise privacy as a fundamental right, delivering the most secure communication experience across various industries. Our cutting-edge encryption technology and robust security measures have made us a trusted partner in the technology, finance, healthcare, and government sectors. If you are passionate about redefining secure communication and want to be part of an innovative team, join us as a Senior Product Manager within our Product Engineering organisation. Together, let us build a world where privacy and security shape the future of communication.

GENERAL INFORMATION

Employment Type: 12-month contract with the possibility of extension

Previous working experience: 5-7 years in Product Security

Working hours: 40hrs/week

Working Location: Remote EU / Berlin

Desired start date: As soon as possible

YOUR CHALLENGE AT WIRE

Be ready to play an essential role by joining our Information Security Team. You will become a pioneer in transforming how organisations and governments communicate securely. You will work closely with the Director of Information Security and interact with the engineering, product, and other teams regularly. Your areas of work are: Product Security

You review security- or privacy-critical changes and implement or propose solutions to potential issues

You help to maintain security documentation of the product with focus on product certifications

You communicate with internal and external stakeholders regarding product security topics

You support new feature development from a security point of view to identify possible security or privacy pitfalls early in the process

You contribute to internal security audits, risk assessments and threat modelling workshops

You conduct security awareness trainings regarding your field of responsibility

Platform Security

You are responsible for our Platform Security controls

You support technical due diligence to ensure compliance with information security and data protection requirements

You oversee the incident management process and team members involved in resolving the incident

You help to maintain documentation of security- and privacy-related processes

You support Wire’s identity and access management

You drive the implementation and maintenance of SecOps measures for our Platform

YOUR PROFILE

Proficient understanding of secure software development practices, including threat modelling and security architecture review for products.

Hands-on experience assessing security and privacy risks in product features (e.g., authentication, encryption, data handling, APIs).

Working knowledge of cloud security fundamentals (e.g., AWS) and common infrastructure tools (Kubernetes, Terraform, Helm).

Experience supporting security certifications/compliance frameworks (e.g., ISO 27001, GDPR).

Strong communication skills and experience engaging both technical and non-technical stakeholders on security and privacy topics.

Ideally, you have relevant security and/or DevOps certifications, such as CKS , etc.

You are familiar with GitHub, Jira and Confluence.

Further qualifications and skills

You are a good communicator and you like to work in a team.

You are interested in and keep up with trends and news from the InfoSec world.

You are self-motivated to identify security problems and engage with teams to find solutions.

You like to do in-depth research on your own and present the results to the team.

You have a thorough understanding of security code reviews, bug triage based on common metrics like CVSS, and vulnerability management.

You have a practical, working understanding of basic cryptographic ciphers/algorithms and understand protocols or concepts like Elliptic Curve, TLS, Public Key Infrastructure and Messaging Layer Security.

You have a strong understanding of application security frameworks like OWASP Top 10.

You bring thorough knowledge of OAuth, SSO, Identity and Access Management systems.

You are willing to subject yourself to the S2 security check of the German Government .

This role can be performed remotely from Germany or another EU country. Regular travel to our Berlin office for workshops, and selected in-person collaboration sessions is expected.

WHY WIRE?

• Join a market-proven company with more than 1,000 customers and help Wire become the trusted secure communications partner for organisations that care deeply about security and privacy.
• Participate in Wire’s long-term success through VSOPs.
• 30 days of vacation entitlement, allowing you to take well-deserved time off and maintain a healthy work-life balance.
• With an Urban Sports Club subscription, stay balanced and mentally and physically healthy.
• Investment in professional development with an annual education budget of €1,000 and access to top-notch learning resources.
• Work from a beautiful office in the heart of Berlin or choose a mix of working from anywhere vs. spending selected days together in our office to connect on a personal level.
• Enjoy fresh breakfast in the office, daily fruits, snacks, free soft drinks, and a nice Barista coffee machine.
• Wire is an equal opportunities employer and does not discriminate on the grounds of gender, civil status, family status, sexual orientation, religion, age, disability or race.

About us

We're building a secure, easy‑to‑use, and feature‑rich communication tool with the latest technologies. We don't just create software — we're also impacting national and international committees. Our research and development occur at our Berlin headquarters and other locations in Europe and the USA, where we embrace diversity and adhere to the strictest data protection standards. We see regulations as a foundation supporting our commitment to secure our customer's communication.