As Senior Security Engineer at LeanIX you are responsible for securing LeanIX’s corporate network, network infrastructure, client endpoints, services and data. As part of our Information Security Team you will help in securing the LeanIX SaaS Platform and its underlying PaaS / IaaS service (to the extent managed by LeanIX). Within the Information Security Team, you will continuously build and improve the security of LeanIX for our leading international enterprise costumers as data protection is a key to our success by using a modern tech stack.

Senior Security Engineer (f/m/d)
Hybrid position based in Bonn/Munich, Ljubljana or Amsterdam. We are only accepting applications from candidates based in Germany, Slovenia or Netherlands.

WHAT IS WAITING FOR YOU?

Providing subject matter expertise on Web application security, API, Single Sign On (including authentication and authorization), systems and network architecture security
Providing security expertise and guidance on a constant stream of new projects and technologies
Performing security assessments of core corporate and cloud infrastructure
Building and/or implementing tools that aid in enhancing the security posture of LeanIX SaaS Platform
Triaging of alerts / issues reported by SCA, SAST and other security monitoring tools
Providing guidance on hardening LeanIX clients, servers and networks against exploitation
Organizing and executing penetration tests and VA scans internally and externally including tracking findings to closure
Identifying issues, proposing solutions, implementing solutions with the help of Product Team
Organise and lead security trainings for our developers

WHAT ARE WE LOOKING FOR?

6-8 years of true industry experience within application and network Security
Relevant experience with application security, secure code review, network security and mobile
Relevant experience with penetration testing methodology for cloud environment
Experience with and knowledgeable of different security frameworks like OWASP Top 10, SANS CWE Top 25
Experience with cloud security (e.g. Azure, AWS, GCP)
Skilled with programming languages: Backend (Java) and frontend (JavaScript)
Some experience in an agile environment
Relevant Security Certifications are a plus e.g. CREST CRT, CREST CPSA, OSCP, CEH, CHFI, etc.
A drive to be a leader within the Application and Infrastructure Security domain

#J-18808-Ljbffr

(Senior) Security Engineer (f/m/d)