(Senior) Security Engineer (d/f/m)

at  Paymenttools englisch

Paymenttools is on a mission to transform the payment landscape for retailers in Europe. With more than 4,4 billion visitors per year in our more than 15,000 REWE Group stores and travel agencies in 21 countries we know exactly what consumers and merchants need when exchanging goods for money. We strongly believe in making payments seamless and invisible, linking them with value added services within the framework of a reliable identity service. Our mantra: #wesolvepayn. We blend cutting-edge technology with stringent security to protect sensitive payment data while nurturing innovation in a cloud-native tech environment.
As a (Senior) Security Engineer, you will play a pivotal role in establishing secure coding practices and raising awareness towards application security. Collaborating closely with software engineers across the organization, your mission will be that our products and underlying workloads meet the security standards that our customers expect. You will serve a trusted advisor for security within our software products, development lifecycles and cloud infrastructure, while also building tools to automate and enhance security processes.
We are looking forward to getting to know you - so, even if you feel that you don’t quite meet all the requirements, but the position still excites you and you think you would love to work with us, please reach out! We would still love to hear from you. We explicitly encourage applicants within groups that are underrepresented in tech spaces as of today. We value all kinds of backgrounds and walks of life.

YOUR EXPERIENCE:

• Strong background in security engineering, with hands-on experience in identifying and mitigating potential security issues in cloud-native applications and environments.
• Solid experience in implementing secure coding practices and running application security workshops.
• Clear communication in English, both in writing and in-person, to technical and non-technical stakeholders.
• Knowledge of programming languages like Java and Python.
• Ability to thrive in a fast-changing, high-paced environment.
• Familiarity with OWASP SAMM, Security Information & Event Management (SIEM) is an advantage
• Familiarity with ISO27001, PCI-DSS, Kritis is an advantage

• Establish and enforce secure coding practices and maintain security controls to ensure robust and resilient application security.
• Identify, analyze, and mitigate security vulnerabilities in applications by utilizing automated tools for security testing and monitoring.
• Conduct threat modeling exercises for applications to identify potential risks in our cloud environment and propose scalable solutions.
• Stay updated with the latest security trends and technologies, and share this knowledge with your colleagues.