Security Engineer (m/f/x) at Allianz Direct Spain at Allianz Global Corporate & Specialty SE

Madrid, Community of Madrid, Spain -

Full Time

Start Date

Immediate

Expiry Date

03 Jan, 26

Salary

0.0

Posted On

05 Oct, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Software Development, Application Security, Defensive Information Security, Cloud-native Environments, CI/CD Integration, Scripting, Compliance, Threat Modeling, Vulnerability Assessments, Incident Response, Security Coaching, Infrastructure as Code, Data Protection, Agile Methodologies, Collaboration, Continuous Learning

Industry

Financial Services

Description

About us: The world around us is changing rapidly and so is the insurance industry. Now’s the right time to make a bold move and shape the future of insurance – this is Allianz Direct! As a pan-European online insurer of the Allianz Group, launched in 2019, Allianz Direct is on its mission to become the most customer-oriented and efficient insurer on the market. Allianz Direct is truly changing the face of insurance, in customer experience, and in technology, processes, people and culture. An international team of business experts and engineers who live and breathe an agile way of working, are seeking to improve and change the way you do insurance. Driven by customer obsession and love for data, Allianz Direct strives for delivering an exceptional experience with a personal touch. So, what makes Allianz Direct so unique? We believe in the power of simplicity and convenience and by doing so we have managed to set new standards when it comes to online insurance. We are a fast-growing technology company with an insurance license, and by fast, we really mean it . Job Purpose/Role: We are looking for a Security Engineer who is looking to work hands-on to help the security team accelerate and support our business even faster. To thrive in this dynamic role, you'll leverage your exceptional technical expertise in information security to bolster our defenses, safeguard our customers' data from cyber threats, and propel our application security program forward. You'll be an integral part of our team, working alongside our talented developers in a collaborative environment that values innovation and excellence. Join us in shaping a secure future while making a meaningful impact in an exciting and rewarding setting. While we look for support primarily in the areas of defensive security and application security, we recognize that a strong combination of both is rare, especially within a DevSecOps-focused environment. We are therefore seeking a Security Engineer with substantial experience in either area who is eager to integrate security practices into the development lifecycle and committed to developing their skills in the other, ensuring seamless collaboration between security, development, and operations teams. Key Responsibilities: Continue building our application security program to keep pace with our product teams, fostering secure coding practices and vulnerability assessments. Conduct threat modeling of new services and infrastructure to identify vulnerabilities before they reach production, while integrating security practices into the CI/CD pipeline. Review code of highly critical services to support important product launches, ensuring compliance with relevant regulations and standards. Enhance our cloud-native threat detection capabilities and automate security processes using scripting and Infrastructure as Code (IaC) tools. Provide support during incident response and collaborate with development and operations teams to ensure security is a shared responsibility, promoting a culture of adaptability and continuous learning. Qualifications/Key skills: University degree in Engineering Disciplines preferred. Strong software development experience. Experience in developing Application Security programs or Defensive Information Security capabilities (e.g., SOC, SIEM, log analysis, incident response). Experience in Cloud-native environments. Skill in integrating security practices into CI/CD pipelines and automating processes with scripting. Ability to communicate security issues and coach technical teams on best practices. Knowledge of compliance with regulations and standards (e.g., GDPR, ISO 27001). English proficiency required; additional languages are a plus. 82779 | IT & Tech Engineering | Professional | | Allianz Direct | Full-Time | Permanent Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. We at Allianz believe in a diverse and inclusive workforce and are proud to be an equal opportunity employer. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation. Great to have you on board. Let's care for tomorrow.

Responsibilities

The Security Engineer will build the application security program, conduct threat modeling, and enhance cloud-native threat detection capabilities. They will also support incident response and promote a culture of shared security responsibility.