Senior Security Engineer (m/f/d)

Clark Germany GmbH; Deutschland; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading insurtech company in Germany is seeking a Security Expert to lead security assessments in product development. Ideal candidates will have 5-8 years of experience in Information Security and hands-on expertise in varying domains such as vulnerability assessment, cloud security, and DevSecOps. Fluent English is essential, and knowledge of German is a plus. Join a diverse team committed to innovation and customer care.

Qualifikationen

• 5 to 8 years of tactical operational experience in Information Security.
• Hands-on experience in at least 2 specified security topics.
• Fluent English skills; German is a plus.

Aufgaben

• Be the go-to expert for security assessments during the product development lifecycle.
• Develop, automate or enhance internal security tools.
• Analyze and prioritize technical risks on products and infrastructure.

Kenntnisse

Vulnerability assessment

Securing infrastructure as code

Pentest or technical security assessment

Cloud Security

DevSecOps

Automation

Programming in Python

Fluent English

Tools

Terraform

Ansible

Kubernetes

Docker

Splunk

Github

Jenkins

Jobbeschreibung

Your tasks

CLARK is one of the world's leading insurtechs. As the first unicorn company from Frankfurt, we're dedicated to building the insurance expert in our customer's pockets to keep for a lifetime. Leveraging cutting-edge technology and intuitive mobile apps, we empower private customers to effortlessly manage, compare, and optimize their insurance situation online. Our digital platform seamlessly integrates personalized consultation from expert advisors, ensuring a holistic customer experience at their fingertips.

Our culture fosters simplicity, reliability, and care for our customers and their needs, uniting employees under a shared purpose: to protect their world and give them peace of mind.

We are supported by investors such as Allianz X, Portage, Tencent, White Star Capital, and Yabeo. Our team, representing 40 nationalities, operates across Germany, Switzerland, the UK, France, and the Netherlands. We pioneer to reinvent insurance day by day.

Join our diverse team and contribute to our vision to give every single customer peace of mind with their insurance situation. Take the next step in your career with us at CLARK!

Your main tasks will include:

• Be the go-to expert for security assessments during the product development lifecycle
• Be the technical expert within the security team
• Develop, automate or enhance internal security tools and services in different areas, such as:
• CI/CD (Github, Jenkins)
• Web and Mobile Application Security Testing (DAST, SAST, Container Security...)
• Cloud Infrastructure (IaC setup, Security Hub)
• Incident Detection and Response (Splunk, SOAR, EDR)
• Discover, analyze, prioritize, and orchestrate remediation of technical risks on Clark Group's products and infrastructure

Requirements

• 5 to 8 years of tactical operational experience in Information Security
• You consider yourself a technical element
• You have hands-on experience in at least 2 of the following topics:
• Vulnerability assessment - Identifying and analyzing technical risks and vulnerabilities in applications, products, features
• Securing infrastructure as code setups including CI/CD deployments with git and docker and infrastructure automation (e.g., Terraform, Ansible)
• Pentest or technical security assessment
• Mobile Application Security
• Implementation of Security Incident Management and Business Continuity Management
• Security Architecture
• DevSecOps
• Container Security (Kubernetes, Docker)
• Cloud Security, ideally AWS
• Automation and shifting security left are no-brainers for you
• Principal Engineer or Architect role are your main considerations for a career path
• Know-how in programming especially in one of the following languages: Python, Bash, Ruby on Rails
• Fluent English skills (German is a plus) in speaking and writing