Security Engineer (m/f/d)

Are you a team player looking for a job where you can contribute your ideas and strengths every day? Do you share our passion for innovation and technology and want to shape the future of work? Then join the GuideCom team! As a digitalization partner to over 750 companies in Germany, we develop innovative, digital solutions for banking, HR, and business development. We focus on the perfect interplay between people and technology, fundamentally rethinking solutions and creating intelligent products that offer our customers real added value.

Whether in development, product management, customer service, or sales – teamwork and a clear focus on our customers' needs are at the heart of everything we do. With a unique company culture, flexible work arrangements, and many attractive benefits, we offer you the best foundation for your new dream job.

Together we're shaping the future of work. We are GuideCom – and you?

Your mission

Designing a holistic approach to security:
You will be responsible for the security of our products and platforms and will continuously develop our technical security landscape in line with current threats, standards and regulatory requirements.
Manage weaknesses effectively:
You identify and assess vulnerabilities and CVEs, prioritize risks in the respective technical context, and ensure consistent processing together with our engineering teams.
Integrate security into development:
You will integrate security principles, tools and automated checks into our development and operational processes, thereby strengthening security by design throughout the entire software lifecycle.
Effectively secure platforms:
You will further develop our security architecture with modern authentication and authorization procedures, secure container images, and reliable secrets management.
Address threats early:
You analyze potential attack vectors, develop processes and playbooks for security incidents, create the conditions to be able to react quickly and in a structured manner, and, if necessary, coordinate measures along established escalation and decision-making processes until a sustainable solution is found.
Making security transparent:
You translate complex security issues into well-founded risk assessments and security evidence, and are a competent contact person for development, management, customers and other stakeholders.
Multiply security expertise:
You will teach best practices for secure software development, strengthen the security awareness of our teams, and ensure that relevant security knowledge is sustainably anchored in our organization.

That's what makes you stand out.

You have several years of in-depth experience in IT security, especially in the field of modern software development and platform architectures, and have actively shaped and further developed security in complex technical environments.
You bring extensive practical expertise in vulnerability management, security analysis and incident response, and are experienced in independently assessing and prioritizing complex technical risks and deriving effective measures.
You are comfortable working in modern cloud, container and CI/CD environments and know how to effectively integrate security requirements into automated development and operational processes.
You have experience with relevant security technologies and tools, for example for vulnerability scanning, SBOMs, identity & access management, SIEM or secrets management.
You are familiar with established security standards and frameworks such as OWASP, NIST or ISO 27001 and can pragmatically apply their requirements to products, platforms and development processes.
You combine technical depth with clear communication and can convey complex security risks to development teams as convincingly as to management, customers and other stakeholders.
You take responsibility independently, consistently put security issues on the agenda, and strive to sustainably secure our products and platforms in the face of a constantly changing threat landscape.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

Security Engineer (m/f/d)

Together we're shaping the future of work. We are GuideCom – and you?

Your mission

Designing a holistic approach to security:
You will be responsible for the security of our products and platforms and will continuously develop our technical security landscape in line with current threats, standards and regulatory requirements.
Manage weaknesses effectively:
You identify and assess vulnerabilities and CVEs, prioritize risks in the respective technical context, and ensure consistent processing together with our engineering teams.
Integrate security into development:
You will integrate security principles, tools and automated checks into our development and operational processes, thereby strengthening security by design throughout the entire software lifecycle.
Effectively secure platforms:
You will further develop our security architecture with modern authentication and authorization procedures, secure container images, and reliable secrets management.
Address threats early:
You analyze potential attack vectors, develop processes and playbooks for security incidents, create the conditions to be able to react quickly and in a structured manner, and, if necessary, coordinate measures along established escalation and decision-making processes until a sustainable solution is found.
Making security transparent:
You translate complex security issues into well-founded risk assessments and security evidence, and are a competent contact person for development, management, customers and other stakeholders.
Multiply security expertise:
You will teach best practices for secure software development, strengthen the security awareness of our teams, and ensure that relevant security knowledge is sustainably anchored in our organization.

That's what makes you stand out.

You have several years of in-depth experience in IT security, especially in the field of modern software development and platform architectures, and have actively shaped and further developed security in complex technical environments.
You bring extensive practical expertise in vulnerability management, security analysis and incident response, and are experienced in independently assessing and prioritizing complex technical risks and deriving effective measures.
You are comfortable working in modern cloud, container and CI/CD environments and know how to effectively integrate security requirements into automated development and operational processes.
You have experience with relevant security technologies and tools, for example for vulnerability scanning, SBOMs, identity & access management, SIEM or secrets management.
You are familiar with established security standards and frameworks such as OWASP, NIST or ISO 27001 and can pragmatically apply their requirements to products, platforms and development processes.
You combine technical depth with clear communication and can convey complex security risks to development teams as convincingly as to management, customers and other stakeholders.
You take responsibility independently, consistently put security issues on the agenda, and strive to sustainably secure our products and platforms in the face of a constantly changing threat landscape.