Cybersecurity (Senior) Software Engineer (m/w/d)

About the role

YOUR TASKSYou develop secure software and infrastructure solutions and integrate security-by-design principles into the development and deployment process from the very beginning. You support our clients in the design, development, and protection of modern applications and infrastructures, for example in the areas of AI, web, APIs, and cloud. You identify security risks in existing applications, cloud environments, and infrastructure configurations and derive concrete measures to remediate them. You conduct code reviews with a focus on security and establish best practices for secure software development. You work closely with development teams, architects, infrastructure teams, and security stakeholders to design secure systems holistically. You implement security mechanisms such as authentication, authorization, encryption, and secrets management in software solutions and cloud configurations. You integrate security checks into CI/CD pipelines and support the development of DevSecOps structures. You develop and maintain infrastructure-as-code solutions to provision cloud and platform infrastructures securely, transparently, and repeatably. You analyze new technologies and tools in the field of application security and actively contribute your ideas to client projects. You support our clients in their transformation toward secure software development, modern architectures, and automated infrastructure processes. You take ownership of your own work packages and actively contribute to the further development of our topics and services. YOUR PROFILYou have completed a degree with good to very good results in computer science, business information systems, IT security, or a comparable qualification. You bring 1–2 years of professional experience for the Engineer role and 2–5 years for the Senior Engineer role. You have solid knowledge of software development, for example Java, Python, TypeScript, or Go, and a strong interest in considering security from the very beginning. You are familiar with cloud infrastructures, automation, and deployment processes. You have experience with clean code, design patterns, and software quality, and can also apply these principles to automation and infrastructure code. You are familiar with version control, especially Git, and code reviews. You know common secure coding practices and have a good understanding of typical vulnerabilities, such as the OWASP Top 10. You have knowledge of container technologies, such as Docker and Kubernetes, and how to secure them. You have practical experience with infrastructure as code or would like to deepen your existing knowledge in this area. Ideally, you have already worked with tools such as Terraform, OpenTofu, or Pulumi. You have experience with automated testing, for example unit, integration, and security tests, and are also familiar with approaches for the automated validation of infrastructure configurations. Ideally, you have already worked with DevSecOps approaches and integrated security into development and deployment processes across AWS, Azure, or GCP. Ideally, you understand modern security architectures, such as zero trust, least privilege, and defense in depth. Ideally, you already hold certifications in the field of security. You think not only technically but also analytically, and can assess and prioritize security risks in a structured way. You enjoy familiarizing yourself with new technologies and security topics and continuously developing your knowledge. You enjoy working in a team, take responsibility for your topics, and drive them forward independently. You communicate confidently in German and English and can explain complex topics clearly, including when interacting with clients. You do not just want to implement solutions, but actively help shape them and contribute to real success in projects and in building new topics. You already have experience in a consulting environment or in working with clients. You have very good German

Skills