Senior Product Security Engineer 

Our client 

A cloud-based property management platform designed to manage multiple properties in the hospitality sector. The client’s platform provides an application programming interface (API) to find applications such as chatbots or mobile apps that enrich guest experience, improve hotel processes, and help configure and manage the hospitality chain. This enables hoteliers and hosts to manage their properties and rooms flexibly in the cloud. 

Tech stack 

The platform consists of 35+ microservices that communicate mainly via Kafka. There is also .NET, Amazon SQS, PostgreSQL, Terraform, Datadog, Docker, and deployment ECS. 

About the role  

You will be part of the software development team that works on building a great product and see it in action, helping customers all over the world to have the best digital environment that fits their needs. 

You will be up to: 

• Implement security control that prevents misconfigurations of cloud resources, and security observability of best practices about cloud infrastructure; 
• Write efficient, maintainable, and testable code; 
• Leverage your knowledge to conduct reviews, threat modeling, and code reviews on applications and relevant supporting services and tools; 
• Implement security services, automation, and monitoring tools to protect our client services: ranging from CI pipelines and ending with security checks in production environments to production microservices that enforce security; 
• Create relevant documentation and metrics for your stakeholders and business leaders, and deliver these in a clear, concise manner; 
• Develop innovative and scalable tools, solutions, and processes to detect security threats and threats to data security; 
• Participate in security operations, responding to security incidents and providing security expertise for the customers and internal stakeholders; 

Requirements: 

• At least 5 years of relevant experience in areas such as application security, offensive security, systems security, and/or incident response; 
• Strong debugging and problem-solving skills; 
• A clear understanding of the balance between security and user friction; 
• Understanding of security vulnerabilities, threat modeling, attacker exploit techniques, and methods for remediation; 
• Experience with any paradigm of Infrastructure-as-Code (IaC), preferably Terraform 
• Knowledge of at least one programming language and scripting skills (C#/.Net); 
• Experience with implementing security tools and practices in modern, cloud-native environments for customer-facing web-based applications. 

  

Education  

 Bachelor’s degree (B.Sc.) in Informatics and computer engineering or similar is considered a plus.  

Foreign languages  

You will also work directly with our client, so fluent English is required. German language proficiency would be considered a plus 

What do we offer?  

• Hybrid approach: possibility to work from a vibrant office or/work from home.  
• Competitive salary   
• Total transparency with the client  
• Ambitious, highly motivating, and supportive environment for career growth  
• Working with highly skilled colleagues with knowledge ranging from development, and project management to cloud architecture  
• 21 vacation days (plus bank holidays)  
• Work cover insurance  
• Private health insurance  
• Gym membership + Fit kit package  
• Ping-pong table and many people willing to beat you.  
• Fresh fruit in the office + snacks and drinks  
• A chance for continuous improvement and learning  
• Additional employee benefits (birthday gifts and vouchers for life events, recognition programs, parenting benefits, certifications, various team-building events, and so much more)