Cybersecurity Software Engineer

TRUSTEQ GmbH; États-Unis; Hybride; USD 100 000 - 150 000; Plein temps

Avantages offerts par ce poste

Flexible Arbeitsmodelle

BahnCard

JobRad

Spendit-Karte

Wellpass

Betriebliche Altersvorsorge

Espresso-Maschine – bester Kaffee

Soft-Drink-Kühlschrank

30 Urlaubstage pro Jahr

Möglichkeit zum Homeoffice

Résumé du poste

TRUSTEQ GmbH sucht eine/n Security Engineer, der/die sichere Software- und Infrastruktur-Lösungen entwickelt und Security-by-Design in den gesamten Entwicklungs- und Bereitstellungsprozess integriert. Sie unterstützen Kunden bei Design, Entwicklung und Schutz moderner Anwendungen und Infrastrukturen, identifizieren Sicherheitsrisiken und leiten konkrete Abhilfemaßnahmen ab.

Sie arbeiten eng mit Entwicklungs-, Architektur- und Infrastruktur-Teams zusammen, implementieren Mechanismen wie

Qualifications

• Abgeschlossenes Studium in Informatik oder vergleichbar, gute bis sehr gute Ergebnisse.
• 1–2 Jahre Berufserfahrung (Engineer) bzw. 2–5 Jahre (Senior Engineer).
• Kenntnisse in Java, Python, TypeScript oder Go sowie Sicherheit von Anfang an.

Responsabilités

• Sichere Software- und Infrastruktur-Lösungen entwickeln und Security-by-Design von Beginn an integrieren.
• Kunden bei Design, Entwicklung und Schutz moderner Apps und Infrastrukturen unterstützen.
• Sicherheitsrisiken in bestehenden Anwendungen, Cloud-Umgebungen identifizieren und Abhilfemaßnahmen ableiten.
• Code-Reviews mit Fokus auf Sicherheit durchführen und Best Practices etablieren.
• Zusammenarbeit mit Entwicklungsteams, Architekten, Infrastruktur-Teams und Security-Stakeholdern.
• Sicherheitsmechanismen wie Authentifizierung, Autorisierung, Verschlüsselung und Secrets-Management implementieren.
• Sicherheits-Checks in CI/CD-Pipelines integrieren und DevSecOps-Strukturen unterstützen.
• Infrastructure-as-Code-Lösungen sicher, transparent und reproduzierbar provisionieren.

Connaissances

Java

Python

TypeScript

Go

Git

CI/CD

Cloud-Konzepte

Sicherheit von Anfang an

Formation

Abgeschlossenes Studium in Informatik / BIS / IT-Sicherheit oder gleichwertige Qualifikation

Outils

Docker

Kubernetes

Terraform

OpenTofu

Pulumi

Description du poste

Задачи:

• You develop secure software and infrastructure solutions and integrate security-by-design principles into the development and deployment process from the very beginning.
• You support our clients in the design, development, and protection of modern applications and infrastructures, for example in the areas of AI, web, APIs, and cloud.
• You identify security risks in existing applications, cloud environments, and infrastructure configurations and derive concrete measures to remediate them.
• You conduct code reviews with a focus on security and establish best practices for secure software development.
• You work closely with development teams, architects, infrastructure teams, and security stakeholders to design secure systems holistically.
• You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations.
• You integrate security checks into CI/CD pipelines and support the development of DevSecOps structures.
• You develop and maintain infrastructure-as-code solutions to provision cloud and platform infrastructures securely, transparently, and repeatably.
• You analyze new technologies and tools in the field of application security and actively contribute your ideas to client projects.
• You support our clients in their transformation toward secure software development, modern architectures, and automated infrastructure processes.
• You take ownership of your own work packages and actively contribute to the further development of our topics and services.

YOUR PROFIL

You have completed a degree with good to very good results in computer science, business information systems, IT security, or a comparable qualification. You bring 1-2 years of professional experience for the Engineer role and 2-5 years for the Senior Engineer role. You have solid knowledge of software development, for example Java, Python, TypeScript, or Go, and a strong interest in considering security from the very beginning. You are familiar with cloud infrastructures, automation, and deployment processes. You have experience with clean code, design patterns, and software quality, and can also apply these principles to automation and infrastructure code. You are familiar with version control, especially Git, and code reviews. You know common secure coding practices and have a good understanding of typical vulnerabilities, such as the OWASP Top 10. You have knowledge of container technologies, such as Docker and Kubernetes, and how to secure them. You have practical experience with infrastructure as code or would like to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi. You have experience with automated testing, for example unit, integration, and security tests, and are also familiar with approaches for the automated validation of infrastructure configurations. Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes across AWS, Azure, or GCP. Ideally, you understand modern security architectures, such as zero trust, least privilege, and defense in depth. Ideally, you already hold certifications in the field of security. You think not only technically but also analytically, and can assess and prioritize security risks in a structured way. You enjoy familiarizing yourself with new technologies and security topics and continuously developing your knowledge. You enjoy working in a team, take responsibility for your topics, and drive them forward independently. You communicate confidently in German and English and can explain complex topics clearly, including when interacting with clients. You do not just want to implement solutions, but actively help shape them and contribute to real success in projects and in building new topics. You already have experience in a consulting environment or in working with clients. You have very good German and English language skills (minimum C1 level in both languages).

Условия:

Supportive Team Culture: Team cohesion is important to us - we support one another and foster a healthy office culture. Our event team organizes regular after-work events to encourage exchange and connection beyond the workplace. Early Ownership & Responsibility: From day one, you will take on exciting tasks with real responsibility - whether on your project or by contributing to internal initiatives. You help shape the way we work. Clear Career Development Paths: You will find an environment that supports, challenges, and advances your professional growth. We offer clearly defined career paths and a transparent competency framework for every level. Creative Work Environment: We give you the freedom and time to develop creative solutions and provide the best, most modern hardware to support you (Apple or Windows).

• Flexible working models
• a BahnCard
• JobRad
• Spendit card
• Wellpass
• a company pension scheme
• the best coffee from our new espresso machine
• a fully stocked soft drinks fridge in the office
• 30 days of paid vacation per year
• the flexibility to work from home